[strongSwan] StrongSwan(optware) on Asus RT-AC66U (merlin build)-can't access LAN IPs

[Simon Deziel]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hello Noel and Luka,

On 13-11-13 04:46 PM, Noel Kuntze wrote:
> I have to say, that you're using the -I parameter of iptables incorrectly. It needs the position in which the rule should be put as the second parameter.
> Like that: iptables -I INPUT 1 -j LOG --log-prefix "Luka-log: "
> If you don't do that, -I works the same way as -A (Append).

Slight correction, "-I" can accept a position argument but when none is
provided it behaves as if "-I <CHAIN> 1" was used. This is the opposite
of "-A".

man 8 iptables:

  -I, --insert chain [rulenum] rule-specification
      Insert one or more rules in the selected chain as the given rule
      number.  So, if the rule number is 1, the rule or rules are
      inserted at the head  of  the  chain.   This  is  also  the
      default if no rule number is specified.


Regards,
Simon
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=Hd5o
-----END PGP SIGNATURE-----