# filter what we send upstream



domain-needed



bogus-priv



filterwin2k



localise-queries







# allow /etc/hosts and dhcp lookups via *.lan



local=/lan/



domain=lan



expand-hosts



no-negcache



resolv-file=/tmp/resolv.conf.auto







dhcp-authoritative



dhcp-leasefile=/tmp/dhcp.leases







# use /etc/ethers for static hosts; same format as --dhcp-host



#  



read-ethers





# other useful options:



# default route(s): dhcp-option=3,192.168.1.1,192.168.1.2



#    dns server(s): dhcp-option=6,192.168.1.1,192.168.1.2

config dhcp



        option interface        lan



        option ignore   1







config dhcp



        option interface        wan



        option ignore   1

nameserver 83.238.255.76

nameserver 213.241.79.37

nameserver 127.0.0.1

z wrt



Server:  127.0.0.1

Address: 127.0.0.1 localhost.



Name:    onet.pl

Address: 213.180.130.200 f1virt.onet.pl

Jan  1 00:24:48 OpenWrt daemon.info dnsmasq[522]: started, version 2.39 cachesize 150

Jan  1 00:24:48 OpenWrt daemon.info dnsmasq[522]: compile time options: IPv6 GNU-getopt ISC-leasefile no-DBus no-I18N TFTP

Jan  1 00:24:48 OpenWrt daemon.info dnsmasq[522]: using local addresses only for domain lan

Jan  1 00:24:48 OpenWrt daemon.info dnsmasq[522]: reading /tmp/resolv.conf.auto

Jan  1 00:24:48 OpenWrt daemon.info dnsmasq[522]: using nameserver 213.241.79.37#53

Jan  1 00:24:48 OpenWrt daemon.info dnsmasq[522]: using nameserver 83.238.255.76#53

Jan  1 00:24:48 OpenWrt daemon.info dnsmasq[522]: using local addresses only for domain lan

Jan  1 00:24:48 OpenWrt daemon.info dnsmasq[522]: read /etc/hosts - 4 addresses

nslookup wp.pl 192.168.10.1

;; connection timed out; no servers could be reached



nslookup onet.pl 192.168.10.1

;; connection timed out; no servers could be reached

#!/bin/sh

# Copyright (C) 2006 OpenWrt.org



iptables -F input_rule

iptables -F output_rule

iptables -F forwarding_rule

iptables -t nat -F prerouting_rule

iptables -t nat -F postrouting_rule



# The following chains are for traffic directed at the IP of the

# WAN interface



iptables -F input_wan

iptables -F forwarding_wan

iptables -t nat -F prerouting_wan



### Open port to WAN

## -- This allows port 22 to be answered by (dropbear on) the router

# iptables -t nat -A prerouting_wan -p tcp --dport 22 -j ACCEPT

# iptables        -A input_wan      -p tcp --dport 22 -j ACCEPT



### Port forwarding

## -- This forwards port 8080 on the WAN to port 80 on 192.168.1.2

# iptables -t nat -A prerouting_wan -p tcp --dport 8080 -j DNAT --to 192.168.1.

# iptables        -A forwarding_wan -p tcp --dport 80 -d 192.168.1.2 -j ACCEPT



### DMZ

## -- Connections to ports not handled above will be forwarded to 192.168.1.2

# iptables -t nat -A prerouting_wan -j DNAT --to 192.168.1.2

# iptables        -A forwarding_wan -d 192.168.1.2 -j ACCEPT

dnsmasq: failed to create listening socket: Address already in use