Understanding System Firewall Rules; Who Should Read This Section; What Are System Firewall Rules; User Priority Chains - Digi TransPort LR54 User Manual

Advanced topics

Understanding system firewall rules

This section explains how TransPort built-in components automatically create and apply system
firewall rules transparently when you configure system components.

Who should read this section

Do this
... If you
If you do not use the
Skip this
create simple firewall rules that allow greater access to device features, skip this
section
section.
If you use the
Continue
TransPort device, read this section to understand how TransPort components
reading
automatically create and manage system firewall rules and how all firewall rules—both
this
system-generated and command-generated—are saved and applied.
section

What are system firewall rules?

System firewall rules are automatically created and managed when you configure various TransPort
components. For example, the WAN, LAN, and port-forward components create and manage system
firewall rules when you configure the components, either from the web interface or the command line.
System firewall rules are applied when the TransPort device starts and anytime you configure a
TransPort component that creates or modifies a system firewall rule.
Demonstration
For example, if you enter the following command to allow HTTPS access on WAN 1:
wan 1 allow-https-access on
TransPort automatically creates a new system firewall rule in the tlr_wan_input section of the
iptables chain. See
chains.
The new rule might look like this:
Chain tlr_wan_input (1 references)
num pkts bytes target
1 0 0 ACCEPT
The WAN firewall rule will be re-applied anytime the WAN configuration is changed from the web
interface or the command line.

User priority chains

WARNING! Take extreme care when using user priority chain rules. If you implement user
priority chain rules incorrectly, you can expose your device to security threats or disable
remote access to the device.
Digi TransPort WR Routers User Guide
firewall or firewall6
firewall or firewall6
Using firewall and firewall6 commands
prot opt in out source
tcp -- eth1 any anywhere
Understanding system firewall rules
commands or you use the commands only to
commands to create or manage firewall rules on your
for more information about tables and
destination
anywhere tcp dpt:443 /* (autogenerated) wan 1 */
510