Multiple source zones in port forward?

Installing and Using OpenWrt
1

At:

http://192.168.1.1/cgi-bin/luci/admin/network/firewall/forwards

where, for example, a DNS hijack rule can be specified, it seems it is only possible to specify one source zone.

But wouldn’t it make sense to enable specifying multiple source zones?

In my case I’d like to hijack DNS requests from both guest and LAN.

So I need separate rules?

1 Like
2

I 100% agree with this :slight_smile:

in my case I use both dns hijacking over multiple zones but I also use a other type of setup where I wish this was possible.

in example:

on my main router I port forward 2 ports to a other router down stream which hosts multiple docker networks, this is to make it look a bit better and also more convient, I want to access everything from the ip from the main router by appending the port numbers, port fowarding make that possible.

but the same like the dns hijacking example, as soon when I have multiple zones I need to create for each a other rule, for visibility it can make it look bloated very fast.

3

The rules with zones are applied after zones are branched out
If you do not want 4 rules you can make your own insert in /etc/nftables.d with aggregated version. You can do like iif != "lo" and so on.