firewall3 redirect rule not working

[duvi]

After upgrading to firewall3, the redirect rule does not work. I can not connect to ssh over the redirected port 22001 anymore.

# port redirect of remapped ssh port (22001) on wan
config redirect
	option src		wan
	option src_dport	22001
	option dest		lan
	option dest_port	22
	option proto		tcp

[duvi]

I see incoming packets in the nat table:

Chain zone_wan_prerouting (1 references)
 pkts bytes target     prot opt in     out     source               destination
  186 16295 MINIUPNPD  all  --  *      *       0.0.0.0/0            0.0.0.0/0
  174 14829 prerouting_wan_rule  all  --  *      *       0.0.0.0/0            0.0.0.0/0            /* user chain for wan prerouting */
   15   872 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:22469 to:0.0.0.0:22

But I don't see them arriving in the filter table:

Chain zone_wan_input (1 references)
 pkts bytes target     prot opt in     out     source               destination
  174 15199 input_wan_rule  all  --  *      *       0.0.0.0/0            0.0.0.0/0            /* user chain for wan input */
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:68 /* Allow-DHCP-Renew */
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0            icmptype 8 /* Allow-Ping */
   80  5830 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp dpt:161
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:22 ctstate DNAT
   94  9369 zone_wan_src_REJECT  all  --  *      *       0.0.0.0/0            0.0.0.0/0

[duvi]

Don't get confused about seeing port 22469 in the previous comment, and 22001 in the config, I just forgot to edit one of them when pasting here, but they are the same.

[jow]

Fixed with r36100 (​http://nbd.name/gitweb.cgi?p=firewall3.git;a=commitdiff;h=cb80885eeb7d45b56651c22a7bec2bfe6a646add)

[jow]

Milestone Attitude Adjustment 12.09 deleted