Question

Hi!

I have the rules in iptables, for example:

-A zone_sstp_src_REJECT -i sstp-+ -m comment --comment "!fw3" -j reject

-A zone_vpn_dest_ACCEPT -o tun_+ -m conntrack --ctstate INVALID -m comment --comment "!fw3: Prevent NAT leakage" -j DROP

-A zone_vpn_dest_ACCEPT -o tun_+ -m comment --comment "!fw3" -j ACCEPT

-A zone_vpn_dest_REJECT -o tun_+ -m comment --comment "!fw3" -j reject

What is the string "!fw3" in key "--comment"? Does it affect for anything?

Thanks! 

Answer 1

Hello,

The --comment option does not have any affect on how the rule works and simply adds an explanatory string of up to 256 characters. 

The "!fw3" string simply refers to firewall3 (fw3) a netfilter/iptable rule builder application used withis OpenWRT/RutOS to parse a configuration file into a set of iptables rules, sending each to the kernel netfilter modules.

Best regards,