ASUS RT-N66U udpxy IPTV stream to WAN

[Cigaras]

iptables -A INPUT -p tcp --dport 4000 -j ACCEPT
iptables -A OUTPUT -p tcp --sport 4000 -j ACCEPT
iptables -I INPUT -p tcp --dport 4000 -j ACCEPT

Could someone please explain me what do those mean? Aren't first and third identical?

 

[L&LD]

No, not identical; one has an -A and the other has a -I preceding it.


Sorry, just a free bump for you (I don't know what they mean either).

 

[RMerlin]

-A appends at the end of the chain, -I inserts at the top (unless you specify a position).

It makes no sense to me however to insert at the top AND append at the end. I wonder if the author might have initially intended for one of these rules to go to a different table than the filter table.

 

[cezar]

Hi,
I not modified integrated udpxy config, but added my own rules in startup scripts:

Please tell me, where those startup scrips are placed?

 

[bayern1975]

Hi,
I not modified integrated udpxy config, but added my own rules in startup scripts:

firewall-start:
iptables -A INPUT -p tcp --dport 4000 -j ACCEPT
iptables -A OUTPUT -p tcp --sport 4000 -j ACCEPT
iptables -I INPUT -p tcp --dport 4000 -j ACCEPT

services-start:
#!/bin/sh

sleep 10
killall udpxy
/usr/sbin/udpxy -m eth0 -p 4000

do not working for me....still my udpxy not online with firewall enabled.....my router is AC68U....

 

[bayern1975]

ok it is working if both scripts starting manual if router reboot. Why router do not start this scripts automatic when starting? can someone post here what is correct protocol? i am using winscp program with ssh connection....

 

[bayern1975]

i add this line in firewall-start but i can not connect to my udpxy from outside my network....something missing?

iptables -I INPUT -p tcp --dport 4000 -j ACCEPT

 

[RMerlin]

i add this line in firewall-start but i can not connect to my udpxy from outside my network....something missing?

iptables -I INPUT -p tcp --dport 4000 -j ACCEPT

udpxy uses UDP, not TCP.

And you definitely do not want to open that to the whole Internet... Use a VPN tunnel.

 

[bayern1975]

udpxy uses UDP, not TCP.

And you definitely do not want to open that to the whole Internet... Use a VPN tunnel.

how to config VPN tunnel? I do not want to pay for VPN service....

sent from Kodi 17 Krypton

 

[RMerlin]

how to config VPN tunnel? I do not want to pay for VPN service....

sent from Kodi 17 Krypton

Paid VPN services are not for remote access, they are for outbound tunneling. You don't need a VPN service to be able to dial back in while outside of home. Configure the VPN server on the router, then configure whichever clients you intend to use while outside of home to connect back to your router's VPN server.

 

[bayern1975]

how to add more IP ranges in iptables firewall rule. now i have one IP range but i need more to add....

iptables -I FORWARD -s 178.58.0.0/16 -p tcp --dport 1234 -j ACCEPT
iptables -I INPUT -s 178.58.0.0/16 -p tcp --dport 1234 -j ACCEPT
iptables -I OUTPUT -s 178.58.0.0/16 -p tcp --dport 1234 -j ACCEPT

i think this combination is ok....those two IP ranges just can connect to my udpxy status through browser....

iptables -I FORWARD -s 95.159.192.0/18 -p tcp --dport 1234 -j ACCEPT
iptables -I INPUT -s 95.159.192.0/18 -p tcp --dport 1234 -j ACCEPT
iptables -I OUTPUT -s 95.159.192.0/18 -p tcp --dport 1234 -j ACCEPT
iptables -I FORWARD -s 188.196.0.0/14 -p tcp --dport 1234 -j ACCEPT
iptables -I INPUT -s 188.196.0.0/14 -p tcp --dport 1234 -j ACCEPT
iptables -I OUTPUT -s 188.196.0.0/14 -p tcp --dport 1234 -j ACCEPT

but i have a problem because i do not get picture from my udpxy....i got this in my syslog:
the link for IPTV is this:

http://192.168.1.1:1234/udp/232.4.1.1:5002

what still missing in this iptables to get picture....?

May  8 14:10:06 kernel: ACCEPT IN=eth0 OUT= MAC=01:00:5e:04:01:01:00:23:33:68:fa:80:08:00 SRC=95.176.246.71 DST=232.4.1.1 LEN=1344 TOS=0x00 PREC=0x80 TTL=60 ID=11366 DF PROTO=UDP SPT=5002 DPT=5002 LEN=1324
May  8 14:10:06 kernel: ACCEPT IN=eth0 OUT= MAC=01:00:5e:04:01:01:00:23:33:68:fa:80:08:00 SRC=95.176.246.71 DST=232.4.1.1 LEN=1344 TOS=0x00 PREC=0x80 TTL=60 ID=11370 DF PROTO=UDP SPT=5002 DPT=5002 LEN=1324
May  8 14:10:06 kernel: ACCEPT IN=eth0 OUT= MAC=01:00:5e:04:01:01:00:23:33:68:fa:80:08:00 SRC=95.176.246.71 DST=232.4.1.1 LEN=1344 TOS=0x00 PREC=0x80 TTL=60 ID=11374 DF PROTO=UDP SPT=5002 DPT=5002 LEN=1324

EDIT: it working...i forgot change IP in playlist....

 

[bayern1975]

is possible to add one more port in the iptables? if i add like this then are both of ports offline?

iptables -I FORWARD -s 95.159.192.0/18 -p tcp --dport 1234,8383 -j ACCEPT
iptables -I INPUT -s 95.159.192.0/18 -p tcp --dport 1234,8383 -j ACCEPT
iptables -I OUTPUT -s 95.159.192.0/18 -p tcp --dport 1234,8383 -j ACCEPT
iptables -I FORWARD -s 188.196.0.0/14 -p tcp --dport 1234,8383 -j ACCEPT
iptables -I INPUT -s 188.196.0.0/14 -p tcp --dport 1234,8383 -j ACCEPT
iptables -I OUTPUT -s 188.196.0.0/14 -p tcp --dport 1234,8383 -j ACCEPT

 

[octopus]

-p tcp -m multiport --ports 1234,1235,1236 -j ACCEPT

Max 15 port number 1230:1240 count as two ports.

 

[bayern1975]

-p tcp -m multiport --ports 1234,1235,1236 -j ACCEPT

Max 15 port number 1230:1240 count as two ports.

i try edit iptables with that line and i think it working....thank you....