Question

To whom it may concer,

As described in the tittle, I need to apply different firewall rules to WAN1( ethernet )  and WAN2 (mobile data ) and I haven't find a way to do it.

It seems that the ethernet wan and mobile 3G are glued into one zone WAN ......

Many thanks,

Rob

Answer 1

Hi,

There's no option in WebUI to specify unique firewall rules for different WAN interfaces on RUT devices but it can be done by writing custom IP Tables rules and inserting them into WebUI -> Network -> Firewall -> Custom rules.

Example of iptables rule to accept incoming SSH traffic for wired WAN(eth0) interface:

iptables -I INPUT -i eth0 -p tcp --dport 22 -j ACCEPT

To create unique rules for mobile interface use"-i wwan0" instead of "-i eth0".