Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I use OpenWRT, (not pfSense as in TFA) struggle with both its UI and `iptables`, but I figured it out eventually... In case it's of use to anyone else:

    pihole_addr='YOUR.IP.GOES.HERE'
    for p in tcp udp; do

      iptables -t nat -A prerouting_lan_rule -p "$p" ! --source "$pihole_addr" ! --destination "$pihole_addr" --dport 53 -j DNAT --to "$pihole_addr"

    done
in http://openwrt.lan/cgi-bin/luci/admin/network/firewall/custo..., or whatever file it saves to, /etc/firewall/something I think.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: