I reflashed Kamikaze 7.09 on my Netgear WGT634U, which had no network trouble before, but now...
I couldn't connect (HTTP or SSH) from the WAN side.
- Yes, I'd opened both of those ports in /etc/firewall.user and "iptables -L input_wan" showed the right rules:
# iptables -L input_wan
Chain input_wan (2 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp dpt:22
ACCEPT tcp -- anywhere anywhere tcp dpt:80
So, that chain must not be getting called. It's supposed to be from this rule in the INPUT chain:
# iptables -L INPUT -v
Chain INPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
...
3 712 input_wan all -- ath0 any anywhere anywhere
But wait, "ath0" isn't my WAN interface!
# tail -3 /etc/config/network
config interface wan
option ifname "eth0.1"
option proto dhcp
# uci show network.wan
network.wan=interface
network.wan.ifname=eth0.1
network.wan.proto=dhcp
So those two agree, but when /etc/init.d/firewall runs "config_get WAN wan ifname" it's getting the wrong device. Why?