I have a openwrt wireless access point. I would like to write rules for UDP packets, so that if the destination is one of the hosts connected to the access point, send it there, if not, forward the packet to the default gateway for further routing. I would like to write these rules using LuCI interface if possible, otherwise more complex ways. Thank You in advance.
That behaviour is how it should operate normally anyway. What's your particular issue and what are you trying to solve with these "rules"?
1 Like
I am trying to address the Eufy requirement here="Limit the firewall ports & IPs needed to be opened to the outside world". Note as stated in the 3rd message, I am concerned only with outgoing UDP ports. They are assuming that I have only one wireless router, whereas I have a separate router and a wireless access point. Both my router and access point are openwrt.
If you need to open ports in the firewall to allow access to cameras (I assume) from outside your network then you'd need to do that on your router. The ports will otherwise already be closed.
I believe I have figured it out. The connection starts inside the access point, outgoing from there. As you have said, the default behavior is to forward to my router, so no problem there. But then my router needs to forward from there to where ever it needs to go, be it outside, to the big bad internet, or to one of the hosts connected to my router, so I really need a forwarding rule for my router. How do I write that? Thank You in advance.
That shouldn't be necessary. The router should already know where to route traffic (whether internally or externally). And firewall rules are generally only required for incoming traffic, the default firewall rules allow traffic out to the wider internet from the LAN.
What issue are you actually trying to solve? What exactly isn't working and how should it work?
1 Like