1 --- server/fwknopd.conf.inst.orig 2014-12-16 21:27:53.000000000 -0600
2 +++ server/fwknopd.conf.inst 2014-12-22 06:51:28.573283458 -0600
4 # The IPT_FORWARD_ACCESS variable is only used if ENABLE_IPT_FORWARDING is
7 -#IPT_FORWARD_ACCESS ACCEPT, filter, FORWARD, 1, FWKNOP_FORWARD, 1;
8 -#IPT_DNAT_ACCESS DNAT, nat, PREROUTING, 1, FWKNOP_PREROUTING, 1;
10 +# These two lines are changed specifically for Openwrt, due to
11 +# different naming conventions. IPT_FORWARD is still disabled
12 +# by default, and must be enabled earlier in this file to be used.
14 +IPT_FORWARD_ACCESS ACCEPT, filter, zone_wan_forward, 1, FWKNOP_FORWARD, 1;
15 +IPT_DNAT_ACCESS DNAT, nat, zone_wan_prerouting, 1, FWKNOP_PREROUTING, 1;
17 # The IPT_SNAT_ACCESS variable is not used unless both ENABLE_IPT_SNAT and
18 # ENABLE_IPT_FORWARDING are enabled. Also, the external static IP must be