OpenWrt Forum Archive

Topic: New User - Wanting to check iptables & ntp (& logic!)

The content of this topic has been archived on 5 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Hi All,

Have been a semi-regular lurker here since I got my WRT54G about 12 months back.

I'm planning to install OpenWRT onto my router this weekend, and just wanted to check my logic before I destroy my web connection!

Firstly - what I want to achieve:
1. Wireless routing of my Web connnection (with WPA PSK)
2. DHCP & DNS functions
3. Configurable SPI firewall
4. NTP daemon, sourcing time from external source then synching my network
5. A Reliable device that doesn't crash under load wink

Later, I will look into using snort and possibly some authentication with Radius against a Samba server on my LAN, but that's another day & another topic.

I believe that all, or most, of these functions are all stock standard in the White Russian RC3 build.
I know that DHCP & DNS provided by dnsmasq and iptables is built-in for the firewalling.

So, to the questions:
I think that there is an NTP client built in (rdate?) but is there an NTP daemon for synching my network?
Does iptables have a default set of rules for the first boot, or will it be open from the start? I'm assuming it starts with a Deny All incoming requests, and leaves it there?
can anyone pass on any 'traps for young players' - things to look out for?

TIA for your help!
Cheers,
Dog

Hi,
Yes for all

I'have got a WTR54G V1 router, running all services exept Wireless you would like to have.
I use WhiteRussian RC 3 and i am a appy man !!!

The ntp server is openntp. It synchonize itself to a list of european ntp stratum 2 server pools. do not forget to add listen port to ntpd.conf file.

You have got a standard iptables script running fine.
Most of Parameters (from Linksys firmware) are saved in nvram and directly use back by OpenWrt. So your router is functional as soon as the firstboot.
You just have to add port forwarding if nedeed. I also suppress icmp on wan interface.
dnsmasq run fine if you use the last version (dnsmasq - 2.22-2) so download it !

Bye
Marc

(Last edited by m3z on 31 Oct 2005, 21:43)

Sweet, thanks Marc.

Guess I'll be upgrading this weekend then!

The discussion might have continued from here.