I am trying to block everything to/from a certain IP address, 7.7.7.7 as an example. In Network>Firewall>Custom Rules, I have the following under all of the instruction comments: iptables -A INPUT -s 7.7.7.7 -j DROP iptables -A OUTPUT -d 7.7.7.7 -j DROP I've restarted the firewall, and the system …

[image] nkqtlcfo: If I go to Status>Firewall, I see the rule I created at the bottom of the INPUT/OUTPUT chains where they should be. They are last (at the bottom) after all of the default rules for things like LAN and WAN targets. Aren't there rules before your's that are accepting the packe…

I changed INPUT/OUTPUT to input_wan_rule/output_wan_rule and it still doesn't block it. And if I go to Network>Firewall>Traffic Rules, I don't see any buttons or fields to add firewall rules; only the ability to move/edit/delete existing rules. And then at the bottom fields to open ports, create a …

I've also tried iptables -I INPUT 1 -s 7.7.7.7 -j DROP iptables -I OUTPUT 1 -d 7.7.7.7 -j DROP which puts the rules at the very beginning (instead of after everything else in the INPUT/OUTPUT chains) but that doesn't work either Edit: That does work apparently, but only blocks output when pinging…

INPUT and OUTPUT chain only checks packets that are sent to/emitted by the router itself. For checking packets forwarded by router, use FORWARD chain, or more specifically, forwarding_wan_rule and forwarding_lan_rule .

[image] nkqtlcfo: And if I go to Network>Firewall>Traffic Rules, I don't see any buttons or fields to add firewall rules; only the ability to move/edit/delete existing rules. And then at the bottom fields to open ports, create a new forward rule, and source NAT. You can edit the rule and spec…

Firewall not blocking IP in iptables

Installing and Using OpenWrt Network and Wireless Configuration

mikma July 5, 2018, 12:34am 6

You can edit the rule and specify source or destination address after you have added it.