skyking
December 19, 2025, 5:47pm
1
Need internet access to two hosts on LAN for HomeAssistant and sftp
pbr opens both hosts to WAN bypassing VPN
config policy
option name 'raspi'
option src_addr '192.168.1.3'
option interface 'wan'
option src_port '8123'
option dest_port '18213'
config policy
option name 'slmail'
option src_addr '192.168.1.10'
option interface 'wan'
option src_port '2222'
option dest_port '2222'
Port Forwarding set to forward ext ports to int ports
config redirect
option target 'DNAT'
option name 'homeasst'
option src 'wan'
option dest_ip '192.168.1.3'
option dest 'lan'
option family 'ipv4'
list proto 'tcp'
option src_dport '18213'
option dest_port '8123'
config redirect
option dest 'lan'
option target 'DNAT'
option name 'slmail'
option src 'wan'
option dest_ip '192.168.1.10'
option family 'ipv4'
list proto 'tcp'
option src_dport '2222'
option dest_port '2222'
Home Asst was working but has stopped forwarding.
ssh to host .10 fails to connect (host has ssh listening on 2222)
I must be missing something simple...?
Seems like the same issue as you had previously?
This works! Thanks for the guidance. Tricky is the Port Forwarding with VPN...
pbr:
config policy
option name 'ha-wg'
option src_addr '192.168.1.3'
option src_port '8123'
option proto 'tcp'
option interface 'wan'
skyking
December 19, 2025, 6:01pm
3
Pretty much - I followed the same config I had for HomeAssistant for the sftp port 2222 but now neither host is getting traffic forwarded.
config policy
option name 'raspi'
option src_addr '192.168.1.3'
option interface 'wan'
option src_port '8123'
config policy
option name 'slmail'
option src_addr '192.168.1.10'
option interface 'wan'
option src_port '2222'
pavelgl
December 19, 2025, 6:02pm
4
Remove option dest_port from both policies.
skyking
December 19, 2025, 6:12pm
5
Thanks for the input. Turns out it's a new VPN pkg for OpenWRT (podkop) that's messing with the port forwarding. Will investigate further. With podkop disabled, forwarding works as expected.
system
Closed
December 29, 2025, 6:12pm
6
This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.