[SOLVED] Firewall changes from "on this device" to "in 1", why?

Hi,

My first post...

I'm using standard OpenWRT 18.06.1, no additional packages except diffutils, all installed packages updated, on a new Linksys WRT32x. Firmware flash worked flawlessly. Now I'm trying to access Luci from a PC elsewhere in my network, added a route from my other router and now I need OpenWRT to allow me access Luci from the PC.

With Luci, I addedd the following to the OpenWRT firewall, Traffic Rules, at Open ports on router:

TestWWWaccess, TCP, 80

This shows up in Luci as:

Any tcp
From any host in wan
To any router IP at port 80 on this device
Accept input

/etc/config/firewall shows at the end:

config rule
option target 'ACCEPT'
option src 'wan'
option proto 'tcp'
option dest_port '80'
option name 'TestWWWaccess'

And this works :-).

Now I want to restrict access a bit by editing this with Luci and this shows something that I don't understand (and makes it stop working). When I Edit, don't change anything (for the purpose of clarity of this post) and Save and Apply, Luci shows it as (differences in bold):

Any tcp
From any host in wan
To any host, port 80 in 1
Accept forward

/etc/config/firewall shows at the end:

config rule
option target 'ACCEPT'
option src 'wan'
option proto 'tcp'
option dest_port '80'
option name 'TestWWWaccess'
option dest '1'

Diff shows only one difference between the firewall files before and after the edit:

  option dest '1'

And this breaks access from my PC.

Removing this line restore what Luci shows and make it work again.

Any thoughts on why this line is added?

I would surmise, because you never specify a destination zone in LuCI.

  • Try browser incognito mode or another browser.
  • Try to disable browser extensions, clean autocomplete data and cache.
  • Try to upgrade the packages:
opkg update && opkg list-upgradable | sed "s/ .*//" \
| while read PKG; do opkg upgrade "$PKG"; done

Its a bug with IE Edge which will be fixed with the next point release. Until then try using Firefox or Chrome instead.

Edit: Details at https://github.com/openwrt/luci/issues/2224

1 Like

This works, using Firefox now, thanks!

1 Like

I'm afraid this wasn't it.

1 Like

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.