31,703
edits
Template:Networking rutos manual firewall: Difference between revisions
Template:Networking rutos manual firewall (view source)
Revision as of 09:15, 19 August 2020
, 19 August 2020→Traffic rules
| Line 521: | Line 521: | ||
</tr> | </tr> | ||
</table> | </table> | ||
==NAT Rules== | |||
<b>Network address translation</b> (<b>NAT</b>) is method of modifying the source/destination address and/or port information in a packet's IP header. | |||
===Source NAT=== | ===Source NAT=== | ||
---- | ---- | ||
<b>Source NAT</b> is a | <b>Source NAT</b> (<b>SNAT</b>) is a form of masquerading used to change a packet's source address and/or port number to a static, user-defined value. SNAT is performed in the POSTROUTING chain, just before a packet leaves the device. | ||
The Source NAT section displays currently existing SNAT rules. | |||
[[File:Networking_rutos_manual_firewall_nat_rules_source_nat.png|border|class=tlt-border]] | |||
=== | ===Add New Source NAT=== | ||
---- | ---- | ||
The <b>New Source NAT</b> section is used to | The <b>Add New Source NAT</b> section is used to create new source NAT rules. | ||
[[File: | [[File:Networking_rutos_manual_firewall_nat_rules_add_new_source_nat.png|border|class=tlt-border]] | ||
<table class="nd-mantable"> | <table class="nd-mantable"> | ||
| Line 541: | Line 549: | ||
<td>Name</td> | <td>Name</td> | ||
<td>string; default: <b>none</b></td> | <td>string; default: <b>none</b></td> | ||
<td>The name of the rule. | <td>The name of the rule. Used only for easier management purposes.</td> | ||
</tr> | </tr> | ||
<tr> | <tr> | ||
<td>Source zone</td> | <td>Source zone</td> | ||
<td>firewall zone; default: <b> | <td>firewall zone; default: <b>lan</b></td> | ||
<td> | <td>Matches traffic originated from the specified zone.</td> | ||
</tr> | </tr> | ||
<tr> | <tr> | ||
<td>Destination | <td>Destination Zone</td> | ||
<td>firewall zone; default: <b> | <td>firewall zone; default: <b>wan</b></td> | ||
<td> | <td>Matches traffic destined for the specified zone.</td> | ||
</tr> | </tr> | ||
<tr> | <tr> | ||
<td>To source IP</td> | <td>To source IP</td> | ||
<td>ip | do not rewrite; default: <b> | <td>ip | do not rewrite; default: <b>none</b></td> | ||
<td>Changes the source IP in the packet header to the value specified in this field.</td> | <td>Changes the source IP address in the packet header to the value specified in this field.</td> | ||
</tr> | </tr> | ||
<tr> | <tr> | ||
<td>To | <td>To Source Port</td> | ||
<td>integer [0..65335] | do not rewrite; default: <b> | <td>integer [0..65335] | do not rewrite; default: <b>none</b></td> | ||
<td>Changes the source port in the packet header to the value specified in this field.</td> | <td>Changes the source port in the packet header to the value specified in this field.</td> | ||
</tr> | </tr> | ||
| Line 566: | Line 574: | ||
<td>Add</td> | <td>Add</td> | ||
<td>- (interactive button)</td> | <td>- (interactive button)</td> | ||
<td>Creates the rule and redirects you to the rule's configuration page.</td> | <td>Creates the rule in accordance with the given parameter and redirects you to the rule's configuration page.</td> | ||
</tr> | </tr> | ||
</table> | </table> | ||