[simi22]

Hello all, hoping someone can help me with this.

I have a NAS running on 192.168.1.10 and VPN router with an IP 192.168.3.0.

When I add the following kill switch script to my DD WRT VPN router I am no longer able to access my NAS shared folders which are connected to a different router on the network. I am able to access them without the kill switch firewall script.

Firewall Kill switch:

iptables -I FORWARD -s 192.168.0.1/24 -j ACCEPT

WAN_IF=`nvram get wan_iface`
iptables -I FORWARD -i br0 -o $WAN_IF -j REJECT --reject-with icmp-host-prohibited
iptables -I FORWARD -i br0 -p tcp -o $WAN_IF -j REJECT --reject-with tcp-reset
iptables -I FORWARD -i br0 -p udp -o $WAN_IF -j REJECT --reject-with udp-reset

Any ideas why the VPN kill switch script is stoping LAN access to the NAS?

Thanks

[egc]

if the router/NAS you want to reach is upstream i.e. connected to your WAN port than it is explainable.

The WAN is blocked

You can add a rule to allow that subnet e.g.:

[simi22]

Legend! It worked.

Do you know/mind explaining the difference between the "-I br0" and "-d" part of the code?

thank you

[egc]

Our wiki explains it much better than I can:
https://wiki.dd-wrt.com/wiki/index.php/Iptables_command

Have fun