dn42-on-OpenWRT.md
... ...
@@ -35,5 +35,37 @@ There are two goals:
35 35
- Allowing traffic from LAN to dn42 (and maybe from dn42 to LAN too)
36 36
- If you have more than one peer, allowing traffic from dn42 to dn42 (forwarding)
37 37
38
+Everything is done in `/etc/config/firewall`.
39
+
40
+#### Zone declaration
41
+
42
+ config zone
43
+ option name dn42
44
+ option network 'dn42peer1 dn42peer2 dn42peer3'
45
+ option input REJECT
46
+ option output ACCEPT
47
+ option forward REJECT
48
+
49
+If you need to NAT your home network into dn42, you probably just need to add:
50
+
51
+ option masq 1
52
+
53
+#### dn42 ↔ LAN forwarding
54
+
55
+ config forwarding
56
+ option src lan
57
+ option dest dn42
58
+
59
+If you're confident enough, you can also forward dn42 into your LAN:
60
+
61
+ config forwarding
62
+ option src dn42
63
+ option dest lan
64
+
65
+
66
+#### dn42 ↔ dn42 forwarding
67
+
68
+This is more tricky.
69
+
38 70
### DNS
39 71