@gratux@lemmy.blahaj.zone avatar

gratux

@[email protected]

reject humanity, become toaster | she/they | experimenting with names

This profile is from a federated server and may be incomplete. View on remote instance

gratux ,
@gratux@lemmy.blahaj.zone avatar

Disclaimer: I am not a professional network engineer, this is just what i found out after researching some iptables terminology.

the lan => wan is perhaps a bit misleading. lan is the zone, or which side of the router this firewall rule is in reference to. wan is another zone, the arrow shows where packets of type Forward are ending up.

  • Input means packets originating from another device within this zone with the router as the destination.
  • Output is a packet from the router to another device in the zone.
  • Forward is a packet originating from one zone with a destination in another zone.

When forward on the wan interface is set to reject, it essentially means no device from outside may initiate a connection. However, they may respond to already opened connection.

I don’t yet know what masquerade does.

gratux ,
@gratux@lemmy.blahaj.zone avatar

yes, lan is the Local Area Network, wan is the Wide Area Network. The zone lan refers to the devices on the local side, wan to the great internet.

gratux ,
@gratux@lemmy.blahaj.zone avatar

Input means the packet stops at the router, like when you access its web ui. I don’t think you want to give the internet access to your router settings :)

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • random
  • All magazines
    •