I have a problem where all external requests are logged or interpreted like they are originating from the router as the log shows shows the routers ip rather then the originating clients IP. I'm trying to work out where/why/how external requests been masqueraded as routers internal ip address?!?!
I'm using a dlink router with DD-WRT v24-sp2 (06/08/12) std. I also have in my conf several firewall rules cause I use my routers wifi connection and have 2 separate wlans.
iptables -t nat -I POSTROUTING -o `get_wanface` -j SNAT --to `nvram get wan_ipaddr` iptables -I FORWARD -i br1 -m state --state NEW -j ACCEPT iptables -I FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu iptables -I FORWARD -i br0 -o br1 -m state --state NEW -j DROP iptables -I FORWARD -i br1 -d `nvram get lan_ipaddr`/`nvram get lan_netmask` -m state --state NEW -j DROP iptables -t nat -I POSTROUTING -o br0 -j SNAT --to `nvram get lan_ipaddr` iptables -I INPUT -i br1 -m state --state NEW -j DROP iptables -I INPUT -i br1 -p udp --dport 67 -j ACCEPT iptables -I INPUT -i br1 -p udp --dport 53 -j ACCEPT iptables -I INPUT -i br1 -p tcp --dport 53 -j ACCEPT
I doubt they are the root of my troubles. If anybody had a similar problem please share experiences. Tnx in advance.