[wrtn0b]

it connects from different services to aws on port 8884 and plus i can't block llmnr ? i just wanted to know if there is a way to control the connection wich are going out of my desktop.

[wrtn0b]

anyone who can help?

[Per Yngve Berg]

You can't specify a port without a protocol.
-p tcp or -p udp comes before --dport.

[wrtn0b]

I did specify the protocol but it's not working at moment, as you wrote before the connection has been initiated from the lan so how can i block it? it seems that ip tables are not working

[Per Yngve Berg]

Try

ptables -I FORWARD -o `get_wanface` -i br0 -p tcp --dport 80

I'm not sure multiport and more than one protocol on one line work with dd-wrt.

[wrtn0b]

Notthing is working. I've tried almost everything but still i can't block any kind of connection from the router. This is kinda sad anyway.

For every port i try to block on every table i've got i still can log from my desktop connections going trough those ports. Doesn't matter wich table i try.

I guess i'm doing something wrong. Or just the build is bugged.

[Wildlion]

You might know this already but just checking:

Are you blocking on the forwarding? (ie from your computer through the router to the internet)

Are you doing these rules BEFORE any of the related/established rules?

If you are talking connections directly too the router that is INPUT chain.

A couple of people have mentioned these things but not really explicitly.

I seriously doubt iptables is broken, I think that there is just a misunderstanding somewhere

The other thing is could we see the iptables command and an iptables -vL (before and after your change). This helps us verify and understand incase there is something small.

[wrtn0b]

Hi guys and thank you for your kindness and patient on answering me, i tried those tables on every chain i've got.
May it be the vpn is the reason why i can't control them?

My point is , if i want no ICMP for example and i set a rule for that i expect that i won't see any ICMP packet on my network. This is just an example but i still see them even after the rule.

As i said before i'm 100% wrong, so i will just reset my ip tables and restart from 0.

Any usefull advice about resetting the tables?

I won't post them because they are a shame due to the thousand try i have done.

Thank you so much guys!

[kernel-panic69]

Uh, are you telling us that you didn't delete the rules that didn't work as you went along?

Easiest way is to reset the router to defaults BUT, you can list each table with rule numbers and then delete the rule number of the offending rules as well.

[wrtn0b]

I did with some of them but i did a lot of try .

Can't i just flush them ? or should i restore it to default?

[bushant]

[kernel-panic69]

[Wildlion]

Sometimes pictures are helpful if you need help explaining something. I know that sometimes I read things differently than others.

But if you want to try again from the beginning it does help, because then we all know the baseline.

[Alozaros]

multiport command is not present in all routers even thou it has very limited use and works just for few ports only..

p.s. i can confirm iptables work with single rule per port..block

If you need multiport, you may try to call multiport module in start up script if it helps...

[Alozaros]

here is how its looking my port blocking as i said one line per port blocked as multiport is not working as i want/it should...

iptables -I FORWARD -p udp --dport 25 -j DROP
iptables -I FORWARD -p tcp -o `get_wanface` --dport 25 -j REJECT
iptables -I FORWARD -p tcp --dport 25 -j DROP
iptables -I FORWARD -p tcp --dport 137 -j DROP
iptables -I FORWARD -p tcp --dport 139 -j DROP
iptables -I FORWARD -p tcp --dport 445 -j DROP
iptables -I FORWARD -p tcp --dport 502 -j DROP