<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: Iptables On A Linksys-Cisco WRT54GL Broadband Router HOWTO</title>
	<atom:link href="http://www.sns.ias.edu/~jns/wp/2006/03/24/iptables-on-a-linksys-cisco-wrt54gl-broadband-router-howto/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.sns.ias.edu/~jns/wp/2006/03/24/iptables-on-a-linksys-cisco-wrt54gl-broadband-router-howto/</link>
	<description></description>
	<pubDate>Thu, 21 Aug 2008 21:59:09 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6</generator>
		<item>
		<title>By: RemoteRoot &#187; Blog Archive &#187; Cheap Linux Firewall - IPTables on the WRT54G</title>
		<link>http://www.sns.ias.edu/~jns/wp/2006/03/24/iptables-on-a-linksys-cisco-wrt54gl-broadband-router-howto/#comment-64545</link>
		<dc:creator>RemoteRoot &#187; Blog Archive &#187; Cheap Linux Firewall - IPTables on the WRT54G</dc:creator>
		<pubDate>Wed, 18 Jul 2007 17:43:15 +0000</pubDate>
		<guid isPermaLink="false">http://www.sns.ias.edu/~jns/wp/2006/03/24/iptables-on-a-linksys-cisco-wrt54gl-broadband-router-howto/#comment-64545</guid>
		<description>[...] for upgrading your router to DD-WRT can be found at James Stephens Blog or on the DD-WRT wiki under [...]</description>
		<content:encoded><![CDATA[<p>[...] for upgrading your router to DD-WRT can be found at James Stephens Blog or on the DD-WRT wiki under [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Alex</title>
		<link>http://www.sns.ias.edu/~jns/wp/2006/03/24/iptables-on-a-linksys-cisco-wrt54gl-broadband-router-howto/#comment-63970</link>
		<dc:creator>Alex</dc:creator>
		<pubDate>Mon, 16 Jul 2007 02:06:27 +0000</pubDate>
		<guid isPermaLink="false">http://www.sns.ias.edu/~jns/wp/2006/03/24/iptables-on-a-linksys-cisco-wrt54gl-broadband-router-howto/#comment-63970</guid>
		<description>I need help with a WRT54G v.6, after a bad f/w flash router is bricked (power failure)during flash, was converting to DD-WRT. tried all the safe ways to restore to no avail.
I have done as the following:
Reset router with a flash pin grounding
Assigned static IP address to computer, and set speed to 10/ half MPB
Conected stand alone D-Link 10/100 ethernet switch conected, adsl modem, router, and computer
Held reset button 30 sec. pulled the power cord.
Powered off router 10sec. 
Powered on
Ping -t 192.168.1.1 recieve Reply from 192.168.1.1: bytes =32 time=1ms TTL=64
Uploaded recent Linksys F/W with tftp.exe from Linksys
says "upload success", waited 10-15 mins, but does not reboot itself, power light continues to blink.
pushed reset again, and powered off, and on, light still flashing?
My question is it toast, or did I do something wrong?
Please help if you can.
Thanks
ALex</description>
		<content:encoded><![CDATA[<p>I need help with a WRT54G v.6, after a bad f/w flash router is bricked (power failure)during flash, was converting to DD-WRT. tried all the safe ways to restore to no avail.<br />
I have done as the following:<br />
Reset router with a flash pin grounding<br />
Assigned static IP address to computer, and set speed to 10/ half MPB<br />
Conected stand alone D-Link 10/100 ethernet switch conected, adsl modem, router, and computer<br />
Held reset button 30 sec. pulled the power cord.<br />
Powered off router 10sec.<br />
Powered on<br />
Ping -t 192.168.1.1 recieve Reply from 192.168.1.1: bytes =32 time=1ms TTL=64<br />
Uploaded recent Linksys F/W with tftp.exe from Linksys<br />
says &#8220;upload success&#8221;, waited 10-15 mins, but does not reboot itself, power light continues to blink.<br />
pushed reset again, and powered off, and on, light still flashing?<br />
My question is it toast, or did I do something wrong?<br />
Please help if you can.<br />
Thanks<br />
ALex</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Joe</title>
		<link>http://www.sns.ias.edu/~jns/wp/2006/03/24/iptables-on-a-linksys-cisco-wrt54gl-broadband-router-howto/#comment-62538</link>
		<dc:creator>Joe</dc:creator>
		<pubDate>Mon, 09 Jul 2007 20:15:41 +0000</pubDate>
		<guid isPermaLink="false">http://www.sns.ias.edu/~jns/wp/2006/03/24/iptables-on-a-linksys-cisco-wrt54gl-broadband-router-howto/#comment-62538</guid>
		<description>Can someone tell me how to configure this for PPPoe?</description>
		<content:encoded><![CDATA[<p>Can someone tell me how to configure this for PPPoe?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Seo Elite Reviews</title>
		<link>http://www.sns.ias.edu/~jns/wp/2006/03/24/iptables-on-a-linksys-cisco-wrt54gl-broadband-router-howto/#comment-54076</link>
		<dc:creator>Seo Elite Reviews</dc:creator>
		<pubDate>Tue, 05 Jun 2007 01:19:29 +0000</pubDate>
		<guid isPermaLink="false">http://www.sns.ias.edu/~jns/wp/2006/03/24/iptables-on-a-linksys-cisco-wrt54gl-broadband-router-howto/#comment-54076</guid>
		<description>Having just purchased the 54GL I have to say it was a big let down.

Why?

Because it very quickly became my door brick.  Plugged it in, turned it on, bios fried, didn't even boot past initial saftey check's.

Can't even ftp into the thing to flash it.

So back to the factory for this one.  I have bookmarked this site though for when I get an actual working one.

Cheers
Marc</description>
		<content:encoded><![CDATA[<p>Having just purchased the 54GL I have to say it was a big let down.</p>
<p>Why?</p>
<p>Because it very quickly became my door brick.  Plugged it in, turned it on, bios fried, didn&#8217;t even boot past initial saftey check&#8217;s.</p>
<p>Can&#8217;t even ftp into the thing to flash it.</p>
<p>So back to the factory for this one.  I have bookmarked this site though for when I get an actual working one.</p>
<p>Cheers<br />
Marc</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dave</title>
		<link>http://www.sns.ias.edu/~jns/wp/2006/03/24/iptables-on-a-linksys-cisco-wrt54gl-broadband-router-howto/#comment-51494</link>
		<dc:creator>Dave</dc:creator>
		<pubDate>Sun, 20 May 2007 07:01:33 +0000</pubDate>
		<guid isPermaLink="false">http://www.sns.ias.edu/~jns/wp/2006/03/24/iptables-on-a-linksys-cisco-wrt54gl-broadband-router-howto/#comment-51494</guid>
		<description>James,

Thanks, this helped me.

folks, don't forget to make the script executable:

chmod 755 /jffs/iptables.fw
nvram commit

James,

I am curious why you set the default policies to ACCEPT just after the sleep?  (I see they are set to DROP later, but not sure if there is some reason behind temporarily setting them to ACCEPT)</description>
		<content:encoded><![CDATA[<p>James,</p>
<p>Thanks, this helped me.</p>
<p>folks, don&#8217;t forget to make the script executable:</p>
<p>chmod 755 /jffs/iptables.fw<br />
nvram commit</p>
<p>James,</p>
<p>I am curious why you set the default policies to ACCEPT just after the sleep?  (I see they are set to DROP later, but not sure if there is some reason behind temporarily setting them to ACCEPT)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Moha</title>
		<link>http://www.sns.ias.edu/~jns/wp/2006/03/24/iptables-on-a-linksys-cisco-wrt54gl-broadband-router-howto/#comment-44136</link>
		<dc:creator>Moha</dc:creator>
		<pubDate>Mon, 16 Apr 2007 21:36:29 +0000</pubDate>
		<guid isPermaLink="false">http://www.sns.ias.edu/~jns/wp/2006/03/24/iptables-on-a-linksys-cisco-wrt54gl-broadband-router-howto/#comment-44136</guid>
		<description>(doubble -) in front of –-ttl-set</description>
		<content:encoded><![CDATA[<p>(doubble -) in front of –-ttl-set</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Moha</title>
		<link>http://www.sns.ias.edu/~jns/wp/2006/03/24/iptables-on-a-linksys-cisco-wrt54gl-broadband-router-howto/#comment-44135</link>
		<dc:creator>Moha</dc:creator>
		<pubDate>Mon, 16 Apr 2007 21:35:14 +0000</pubDate>
		<guid isPermaLink="false">http://www.sns.ias.edu/~jns/wp/2006/03/24/iptables-on-a-linksys-cisco-wrt54gl-broadband-router-howto/#comment-44135</guid>
		<description>I would like to change the ttl value. I added the line:
iptables -t mangle -I PREROUTING -i ppp0 -j TTL –-ttl-set 10 (it should be -- in front of ttl-set) But the TTl does not change, whe I ping on the client. Can someone tell me what should I do.
Thank's!</description>
		<content:encoded><![CDATA[<p>I would like to change the ttl value. I added the line:<br />
iptables -t mangle -I PREROUTING -i ppp0 -j TTL –-ttl-set 10 (it should be &#8212; in front of ttl-set) But the TTl does not change, whe I ping on the client. Can someone tell me what should I do.<br />
Thank&#8217;s!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: ap1000</title>
		<link>http://www.sns.ias.edu/~jns/wp/2006/03/24/iptables-on-a-linksys-cisco-wrt54gl-broadband-router-howto/#comment-28107</link>
		<dc:creator>ap1000</dc:creator>
		<pubDate>Wed, 24 Jan 2007 14:33:32 +0000</pubDate>
		<guid isPermaLink="false">http://www.sns.ias.edu/~jns/wp/2006/03/24/iptables-on-a-linksys-cisco-wrt54gl-broadband-router-howto/#comment-28107</guid>
		<description>Great manual! The only problem I had was flushing of the firewall rules - didn't work for me. The rules were appended, so I came out with both old and new set together each time. I ended up replacing the flushing loop with:
iptables -F
iptables -X
iptables -t nat -F
iptables -t nat -X
iptables -t mangle -F
iptables -t mangle -X

That works - at least for me ;)</description>
		<content:encoded><![CDATA[<p>Great manual! The only problem I had was flushing of the firewall rules - didn&#8217;t work for me. The rules were appended, so I came out with both old and new set together each time. I ended up replacing the flushing loop with:<br />
iptables -F<br />
iptables -X<br />
iptables -t nat -F<br />
iptables -t nat -X<br />
iptables -t mangle -F<br />
iptables -t mangle -X</p>
<p>That works - at least for me <img src='http://www.sns.ias.edu/~jns/wp/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' /></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: pacooo</title>
		<link>http://www.sns.ias.edu/~jns/wp/2006/03/24/iptables-on-a-linksys-cisco-wrt54gl-broadband-router-howto/#comment-26255</link>
		<dc:creator>pacooo</dc:creator>
		<pubDate>Sat, 13 Jan 2007 08:31:39 +0000</pubDate>
		<guid isPermaLink="false">http://www.sns.ias.edu/~jns/wp/2006/03/24/iptables-on-a-linksys-cisco-wrt54gl-broadband-router-howto/#comment-26255</guid>
		<description>How to change firmware of WRT54GS v6 with serial number CGN9…
How to change ttl=1
Because v5 and v6 of this router are different with little less flash ram I have to try everything and only this works great. Here are the few steps:

	Download [vxworks_prep_gs_v03.zip] and extract.
	Download and extract [vxworks_killer_gs_v08.zip]
	Download [DD-WRT micro generic]. You may want to check [DD-WRT] to make sure there isn't a newer version than v23 SP2. Do not use the one labelled 'WRT54G' or 'WRT54GS', use the 'generic' version.
	If you don't know how to use (or don't have) a console mode TFTP tool (i.e. tftp.exe), download the [Linksys TFTP transfer tool].
	You will want to assign your network adaptor a manual IP address, since you may loose your automatically configured one and have trouble TFTP'ing the firmware. It's done at the properties dialog of your network connection, in the 'Internet Protocol (TCP/IP)' properties.
	Go to your router's web based interface and enter the 'Administration' tab. Then select 'Firmware Upgrade' and choose the vxworks_prep_gs_v03.bin file. Hit apply. After a minute, your browser window will go blank. At this point, power cycle your router.
	Again point your web browser to http://192.168.1.1. You'll see a different sort of firmware upgrade screen. This is the Management Mode. Select and apply the vxworks_killer_gs_v08.bin firmware upgrade. WAIT for your browser window to turn to report 'Success'. Have troubles? Try a different web browser, the http daemon in management mode is very finicky.
	Now unplug the power cord of your router, then plug it back in. The power LED should now be blinking.
	Now you need to do a binary mode TFTP transfer of DD-WRT micro generic to your router. To do this you can use the Windows TFTP console mode utility, the Linksys TFTP Windows GUI utility, or some other TFTP client. 
	Do NOT reboot your router after TFTP'ing, this will happen automatically. It takes a couple minutes after the TFTP transfer finishes for the firmware to actually be flashed.

Finalizing
	After your router reboots itself following the TFTP transfer, you should have access to the DD-WRT's HTTP interface at 192.168.1.1
	Congratulations, you're now running DD-WRT micro! This was a one tim operation, future firmware updates do not require this process.
	If you have problems, please visit an appropriate user forum to get aid from your fellow users. There are many common problems, and common solutions. I suggest the forums at [dd-wrt.com]. 
	Remember, the default username and password for a new DD-WRT flash is:
username: root 
password: admin

How to TTL=1 to TTL=10:
In the COMMANDS menu add this line in FIREWALL:

iptables -t mangle -I PREROUTING -i ppp0 -j TTL --ttl-set 10

If you have more questions email me: pacooo@abv.bg</description>
		<content:encoded><![CDATA[<p>How to change firmware of WRT54GS v6 with serial number CGN9…<br />
How to change ttl=1<br />
Because v5 and v6 of this router are different with little less flash ram I have to try everything and only this works great. Here are the few steps:</p>
<p>	Download [vxworks_prep_gs_v03.zip] and extract.<br />
	Download and extract [vxworks_killer_gs_v08.zip]<br />
	Download [DD-WRT micro generic]. You may want to check [DD-WRT] to make sure there isn&#8217;t a newer version than v23 SP2. Do not use the one labelled &#8216;WRT54G&#8217; or &#8216;WRT54GS&#8217;, use the &#8216;generic&#8217; version.<br />
	If you don&#8217;t know how to use (or don&#8217;t have) a console mode TFTP tool (i.e. tftp.exe), download the [Linksys TFTP transfer tool].<br />
	You will want to assign your network adaptor a manual IP address, since you may loose your automatically configured one and have trouble TFTP&#8217;ing the firmware. It&#8217;s done at the properties dialog of your network connection, in the &#8216;Internet Protocol (TCP/IP)&#8217; properties.<br />
	Go to your router&#8217;s web based interface and enter the &#8216;Administration&#8217; tab. Then select &#8216;Firmware Upgrade&#8217; and choose the vxworks_prep_gs_v03.bin file. Hit apply. After a minute, your browser window will go blank. At this point, power cycle your router.<br />
	Again point your web browser to <a href="http://192.168.1.1" rel="nofollow">http://192.168.1.1</a>. You&#8217;ll see a different sort of firmware upgrade screen. This is the Management Mode. Select and apply the vxworks_killer_gs_v08.bin firmware upgrade. WAIT for your browser window to turn to report &#8216;Success&#8217;. Have troubles? Try a different web browser, the http daemon in management mode is very finicky.<br />
	Now unplug the power cord of your router, then plug it back in. The power LED should now be blinking.<br />
	Now you need to do a binary mode TFTP transfer of DD-WRT micro generic to your router. To do this you can use the Windows TFTP console mode utility, the Linksys TFTP Windows GUI utility, or some other TFTP client.<br />
	Do NOT reboot your router after TFTP&#8217;ing, this will happen automatically. It takes a couple minutes after the TFTP transfer finishes for the firmware to actually be flashed.</p>
<p>Finalizing<br />
	After your router reboots itself following the TFTP transfer, you should have access to the DD-WRT&#8217;s HTTP interface at 192.168.1.1<br />
	Congratulations, you&#8217;re now running DD-WRT micro! This was a one tim operation, future firmware updates do not require this process.<br />
	If you have problems, please visit an appropriate user forum to get aid from your fellow users. There are many common problems, and common solutions. I suggest the forums at [dd-wrt.com].<br />
	Remember, the default username and password for a new DD-WRT flash is:<br />
username: root<br />
password: admin</p>
<p>How to TTL=1 to TTL=10:<br />
In the COMMANDS menu add this line in FIREWALL:</p>
<p>iptables -t mangle -I PREROUTING -i ppp0 -j TTL &#8211;ttl-set 10</p>
<p>If you have more questions email me: <a href="mailto:pacooo@abv.bg">pacooo@abv.bg</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Nick Berardi</title>
		<link>http://www.sns.ias.edu/~jns/wp/2006/03/24/iptables-on-a-linksys-cisco-wrt54gl-broadband-router-howto/#comment-15894</link>
		<dc:creator>Nick Berardi</dc:creator>
		<pubDate>Mon, 20 Nov 2006 16:37:29 +0000</pubDate>
		<guid isPermaLink="false">http://www.sns.ias.edu/~jns/wp/2006/03/24/iptables-on-a-linksys-cisco-wrt54gl-broadband-router-howto/#comment-15894</guid>
		<description>~ # nvram set rc_firewall="
   iptables -A PREROUTING -p tcp -m tcp -d 172.16.16.200
   --dport 8080 -j DNAT --to-destination 192.168.1.1:80"
~ # nvram commit

That didn't work because you need

/usr/sbin/iptables instead of just iptables</description>
		<content:encoded><![CDATA[<p>~ # nvram set rc_firewall=&#8221;<br />
   iptables -A PREROUTING -p tcp -m tcp -d 172.16.16.200<br />
   &#8211;dport 8080 -j DNAT &#8211;to-destination 192.168.1.1:80&#8243;<br />
~ # nvram commit</p>
<p>That didn&#8217;t work because you need</p>
<p>/usr/sbin/iptables instead of just iptables</p>
]]></content:encoded>
	</item>
</channel>
</rss>
