___ ___ | | | | | | | | | | | A | | | B | |___| | |___| 192.168.2.2| | |192.168.1.2 | | DMZ | |___ | ___| | | | 192.168.2.1 | | | 192.168.1.1 __ |_____|___ |_0_1_2_3_4_W_| | | | Internet ifconfig: br0 Link encap:Ethernet HWaddr 00:12:17:DF:B3:55 inet addr:192.168.2.1 Bcast:192.168.2.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:919716 errors:0 dropped:0 overruns:0 frame:0br0 collisions:0 txqueuelen:0 RX bytes:60049071 (57.2 MiB) TX bytes:970766746 (925.7 MiB) eth0 Link encap:Ethernet HWaddr 00:12:17:DF:B3:55 UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1 RX packets:1345228 errors:0 dropped:0 overruns:0 frame:0 TX packets:1144792 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:1128211780 (1.0 GiB) TX bytes:229448488 (218.8 MiB) Interrupt:5 eth1 Link encap:Ethernet HWaddr 00:12:17:DF:B3:57 UP BROADCAST RUNNING ALLMULTI MULTICAST MTU:1500 Metric:1 RX packets:921314 errors:0 dropped:0 overruns:0 frame:3675817 TX packets:1097181 errors:667 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:73066844 (69.6 MiB) TX bytes:980134529 (934.7 MiB) Interrupt:4 Base address:0x1000 lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:82 errors:0 dropped:0 overruns:0 frame:0 TX packets:82 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:6823 (6.6 KiB) TX bytes:6823 (6.6 KiB) ppp0 Link encap:Point-Point Protocol inet addr:10.10.3.129 P-t-P:10.10.1.254 Mask:255.255.255.255 UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1 RX packets:137873 errors:0 dropped:0 overruns:0 frame:0 TX packets:69365 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:3 RX bytes:193460857 (184.4 MiB) TX bytes:2775649 (2.6 MiB) vlan0 Link encap:Ethernet HWaddr 00:12:17:DF:B3:55 UP BROADCAST RUNNING ALLMULTI MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:1608 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:0 (0.0 B) TX bytes:164731 (160.8 KiB) vlan1 Link encap:Ethernet HWaddr 00:12:17:DF:B3:55 inet addr:82.245.252.174 Bcast:82.245.252.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:1257309 errors:0 dropped:0 overruns:0 frame:0 TX packets:1019563 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:1086427439 (1.0 GiB) TX bytes:94623775 (90.2 MiB) vlan2 Link encap:Ethernet HWaddr 00:12:17:DF:B3:55 inet addr:192.168.1.1 Bcast:192.168.1.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:87822 errors:0 dropped:0 overruns:0 frame:0 TX packets:123617 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:17572326 (16.7 MiB) TX bytes:129629899 (123.6 MiB) nvram : OpenWrt:~# nvram show | grep vlan0 vlan0ports=1 2 3 5* vlan0hwname=et0 lan_ifnames=vlan0 eth1 eth2 OpenWrt:~# nvram show | grep vlan1 wan_device=vlan1 wan_ifname=vlan1 vlan1hwname=et0 vlan1ports=0 5 OpenWrt:~# nvram show | grep vlan2 vlan2ports=4 5 vlan2hwname=et0 dmz_ifname=vlan2 /etc/firewall.user DMZ=$(nvram get dmz_ifname) iptables -A forwarding_rule -i $DMZ -o $WAN -j ACCEPT