OpenVPN nur für bestimmte Dienste

[Danjel4u]

Ist es möglich die OpenVPN so einzuschränken das darüber nur ein bestimmter dienst über ein TCP Port funktioniert.

OpenVPN Server FB 7390

z.b FTP oder sowas

 

[MaxMuster]

Die 7390 ist OpenVPN-Server und Clients sollen nur FTP darüber machen dürfen? Das sollte gehen. Du brauchst dafür iptables.

Wenn du damit für das OpenVPN alle Pakete verwirfst, die nicht zum/vom FTP kommen, sollte das sogar mit aktueller FW funktionieren (allerdings ist gerade FTP etwas aufwändig, weil es mit Controll- und Datenverbindungen funktioniert, die wir mit aktuellen Firmwares nicht überprüfen können). Ungeprüft "aus dem Kopf" sollte das in etwa so aussehen, um durch das VPN nur FTP auf die FB, auf deren VPN-IP zu erlauben:

# Eingehend
###########
# FTP-Verbindung
iptables -A INPUT -i tun0 -d <OpenVPN-Server-IP> -p tcp --dport 21 -j ACCEPT
# (aktive) Datenverbindung
iptables -A INPUT -i tun0 [B]-d[/B] <OpenVPN-Server-IP> -p tcp --dport 20 -j ACCEPT
iptables -A INPUT -i tun0 -j DROP


# Ausgehend
###########
# FTP-Verbindung
iptables -A OUTPUT -o tun0 -s <OpenVPN-Server-IP> -p tcp --sport 21 -j ACCEPT
# (aktive) Datenverbindung
iptables -A OUTPUT -o tun0 -s <OpenVPN-Server-IP> -p tcp --sport 20 -j ACCEPT
iptables -A OUTPUT -o tun0 -j DROP

 

[Danjel4u]

So meine Neue Fritzbox ist wieder gekommen. Werde ich gleich ausprobieren.

 

[MaxMuster]

Hatte gerade noch einen Fehler in der INPUT-Regel oben gesehen und korrigiert (da ist es immer die Ziel-Adresse des VPN-Servers , also -d).

 

[Danjel4u]

habe mir soeben ein freetz image geladen und aufgespielt. VPN ist eingerichtet. Wenn ich jetzt mit putty auf fritzbox zu greife und denn Befehl eingebe bekomme ich iptables not found.

Mach ich was falsch?

7390_05.52-freetz-2.0-10933M.de_20130811-121032.image

FREETZ_HAVE_DOT_CONFIG=y
FREETZ_USER_LEVEL_EXPERT=y
FREETZ_SHOW_ADVANCED=y
FREETZ_SHOW_EXPERT=y
FREETZ_TYPE_7390=y
FREETZ_TYPE_LANG_DE=y
FREETZ_TYPE_FIRMWARE_05_5X=y
FREETZ_TYPE_FIRMWARE_FINAL=y
FREETZ_TYPE_LANGUAGE="de"
FREETZ_TARGET_IPV6_SUPPORT=y
FREETZ_REPLACE_KERNEL=y
FREETZ_SQUASHFS_BLOCKSIZE_65536=y
FREETZ_SQUASHFS_BLOCKSIZE=65536
FREETZ_REMOVE_AHA=y
FREETZ_REMOVE_AURA_USB=y
FREETZ_REMOVE_NAS=y
FREETZ_REMOVE_MYFRITZ=y
FREETZ_REMOVE_FHEM=y
FREETZ_REMOVE_AVM_VPN=y
FREETZ_REMOVE_BRANDING_1und1=y
FREETZ_REMOVE_DTRACE=y
FREETZ_REMOVE_FTPD=y
FREETZ_REMOVE_HELP=y
FREETZ_REMOVE_SOCAT=y
FREETZ_REMOVE_MEDIASRV=y
FREETZ_REMOVE_SAMBA=y
FREETZ_REMOVE_TR069=y
FREETZ_REMOVE_UPNP=y
FREETZ_REMOVE_AVM_E2FSPROGS=y
FREETZ_REMOVE_WEBDAV=y
FREETZ_PATCH_FREETZMOUNT=y
FREETZ_USBSTORAGE_AUTOMOUNT=y
FREETZ_AUTOMOUNT_EXT2=y
FREETZ_AUTOMOUNT_EXT3=y
FREETZ_AUTOMOUNT_EXT4=y
FREETZ_AUTOMOUNT_FAT=y
FREETZ_AUTOMOUNT_NTFS=y
FREETZ_PATCH_MAXDEVCOUNT=y
FREETZ_CUSTOM_UDEV_RULES=y
FREETZ_ADD_ETCSERVICES=y
FREETZ_AVMDAEMON_DISABLE_IGD=y
FREETZ_AVMDAEMON_DISABLE_NTP=y
FREETZ_AVMDAEMON_DISABLE_TR069=y
FREETZ_PACKAGE_LDD=y
FREETZ_PACKAGE_NANO_SHELL=y
FREETZ_PACKAGE_USBUTILS=y
FREETZ_PACKAGE_USBUTILS_IDS=y
FREETZ_PACKAGE_USBUTILS_IDS_UPDATE=y
FREETZ_PACKAGE_DROPBEAR=y
FREETZ_PACKAGE_DROPBEAR_SFTP_SERVER=y
FREETZ_PACKAGE_DROPBEAR_DISABLE_HOST_LOOKUP=y
FREETZ_PACKAGE_HASERL=y
FREETZ_PACKAGE_INETD=y
FREETZ_PACKAGE_NANO=y
FREETZ_PACKAGE_NANO_TINY=y
FREETZ_PACKAGE_NTFS=y
FREETZ_PACKAGE_NTFS_mkntfs=y
FREETZ_PACKAGE_NTFS_ntfsfix=y
FREETZ_PACKAGE_NTFS_ntfsinfo=y
FREETZ_PACKAGE_NTFS_ntfslabel=y
FREETZ_PACKAGE_OPENVPN=y
FREETZ_PACKAGE_OPENVPN_VERSION_2_3=y
FREETZ_PACKAGE_OPENVPN_OPENSSL=y
FREETZ_PACKAGE_OPENVPN_STATIC=y
FREETZ_PACKAGE_OPENVPN_WITH_LZO=y
FREETZ_PACKAGE_OPENVPN_WITH_MGMNT=y
FREETZ_PACKAGE_OPENVPN_ENABLE_SMALL=y
FREETZ_PACKAGE_OPENVPN_USE_IPROUTE=y
FREETZ_PACKAGE_VSFTPD=y
FREETZ_PACKAGE_TBFLEX=y
FREETZ_PACKAGE_TBFLEX_PACKAGES=y
FREETZ_PACKAGE_TBFLEX_EXTERNAL=y
FREETZ_PACKAGE_DOSFSTOOLS=y
FREETZ_PACKAGE_DOSFSTOOLS_DOSFSCK=y
FREETZ_PACKAGE_DOSFSTOOLS_DOSFSLABEL=y
FREETZ_PACKAGE_DOSFSTOOLS_MKDOSFS=y
FREETZ_PACKAGE_E2FSPROGS=y
FREETZ_PACKAGE_E2FSPROGS_STATIC=y
FREETZ_PACKAGE_E2FSPROGS_E2FSCK=y
FREETZ_PACKAGE_E2FSPROGS_E2MAKING=y
FREETZ_PACKAGE_E2FSPROGS_E2TUNING=y
FREETZ_PACKAGE_E2FSPROGS_E2DEBUG=y
FREETZ_PACKAGE_E2FSPROGS_E2RESIZE=y
FREETZ_PACKAGE_HOL=y
FREETZ_PACKAGE_OPENDD=y
FREETZ_PACKAGE_OPENDD_WITH_SSL=y
FREETZ_PACKAGE_OPENSSH=y
FREETZ_PACKAGE_OPENSSH_sftp_server=y
FREETZ_PACKAGE_OPENSSL=y
FREETZ_PACKAGE_USBIP=y
FREETZ_PACKAGE_WGET=y
FREETZ_PACKAGE_WOL=y
FREETZ_PACKAGE_AUTHORIZED_KEYS=y
FREETZ_PACKAGE_AVM_FIREWALL=y
FREETZ_PACKAGE_SYSLOGD_CGI=y
FREETZ_PACKAGE_WOL_CGI=y
FREETZ_PACKAGE_IPTABLES_IS_SELECTABLE=y
FREETZ_PACKAGE_MOD=y
FREETZ_PACKAGE_MOD_ETCSERVICES=y
FREETZ_PACKAGE_MODCGI=y
FREETZ_LIB_libcrypto=y
FREETZ_LIB_libssl=y
FREETZ_OPENSSL_VERSION_PROMPT=y
FREETZ_OPENSSL_VERSION_0=y
FREETZ_OPENSSL_SHLIB_VERSION="0.9.8"
FREETZ_LIB_libz=y
FREETZ_LIB_libfuse=y
FREETZ_LIB_libntfs=y
FREETZ_LIB_libglib_2=y
FREETZ_LIB_libncurses=y
FREETZ_SHARE_terminfo=y
FREETZ_SHARE_terminfo_ansi=y
FREETZ_SHARE_terminfo_gnome=y
FREETZ_SHARE_terminfo_konsole=y
FREETZ_SHARE_terminfo_linux=y
FREETZ_SHARE_terminfo_putty=y
FREETZ_SHARE_terminfo_rxvt=y
FREETZ_SHARE_terminfo_screen=y
FREETZ_SHARE_terminfo_screenMINUSw=y
FREETZ_SHARE_terminfo_sun=y
FREETZ_SHARE_terminfo_vt100=y
FREETZ_SHARE_terminfo_vt102=y
FREETZ_SHARE_terminfo_vt102MINUSnsgr=y
FREETZ_SHARE_terminfo_vt102MINUSw=y
FREETZ_SHARE_terminfo_vt200=y
FREETZ_SHARE_terminfo_vt220=y
FREETZ_SHARE_terminfo_vt52=y
FREETZ_SHARE_terminfo_xterm=y
FREETZ_SHARE_terminfo_xtermMINUScolor=y
FREETZ_SHARE_terminfo_xtermMINUSxfree86=y
FREETZ_LIB_libpcre=y
FREETZ_LIB_ld_uClibc=y
FREETZ_LIB_libcrypt=y
FREETZ_LIB_libdl=y
FREETZ_LIB_libm=y
FREETZ_LIB_libpthread=y
FREETZ_LIB_librt=y
FREETZ_LIB_libuClibc=y
FREETZ_LIB_libutil=y
FREETZ_LIB_libusb=y
FREETZ_LIB_libusb_1=y
FREETZ_LIB_libftdi=y
FREETZ_LIB_libgcc_s=y
FREETZ_LIB_libctlmgr=y
FREETZ_LIB_libsysfs=y
FREETZ_KERNEL_VERSION_2_6_28=y
FREETZ_KERNEL_VERSION="2.6.28"
FREETZ_KERNEL_VERSION_2_6_13_MIN=y
FREETZ_KERNEL_VERSION_2_6_19_MIN=y
FREETZ_KERNEL_VERSION_2_6_28_MIN=y
FREETZ_KERNEL_VERSION_2_6_28_MAX=y
FREETZ_KERNEL_VERSION_2_6_32_MAX=y
FREETZ_KERNEL_LAYOUT_IKS=y
FREETZ_KERNEL_LAYOUT="iks"
FREETZ_MODULES_KVER="2.6.28.10"
FREETZ_MODULE_usbip=y
FREETZ_MODULE_usbip_common_mod=y
FREETZ_MODULE_usbserial=y
FREETZ_MODULE_pl2303=y
FREETZ_MODULE_ftdi_sio=y
FREETZ_MODULE_ext2=y
FREETZ_MODULE_ext4=y
FREETZ_MODULE_fat=y
FREETZ_MODULE_hfsplus=y
FREETZ_MODULE_fuse=y
FREETZ_MODULE_jbd2=y
FREETZ_MODULE_nls_utf8=y
FREETZ_MODULE_mbcache=y
FREETZ_MODULE_crc16=y
FREETZ_BUSYBOX__MANDATORY=y
FREETZ_BUSYBOX__IPV6_UTILS=y
FREETZ_BUSYBOX_HAVE_DOT_CONFIG=y
FREETZ_BUSYBOX_PLATFORM_LINUX=y
FREETZ_BUSYBOX_FEATURE_BUFFERS_GO_ON_STACK=y
FREETZ_BUSYBOX_SHOW_USAGE=y
FREETZ_BUSYBOX_FEATURE_VERBOSE_USAGE=y
FREETZ_BUSYBOX_FEATURE_DEVPTS=y
FREETZ_BUSYBOX_FEATURE_PIDFILE=y
FREETZ_BUSYBOX_PID_FILE_PATH="/var/run"
FREETZ_BUSYBOX_FEATURE_SUID=y
FREETZ_BUSYBOX_FEATURE_PREFER_APPLETS=y
FREETZ_BUSYBOX_BUSYBOX_EXEC_PATH="/bin/busybox"
FREETZ_BUSYBOX_FEATURE_SYSLOG=y
FREETZ_BUSYBOX_FEATURE_HAVE_RPC=y
FREETZ_BUSYBOX_LFS=y
FREETZ_BUSYBOX_CROSS_COMPILER_PREFIX=""
FREETZ_BUSYBOX_SYSROOT=""
FREETZ_BUSYBOX_EXTRA_CFLAGS=""
FREETZ_BUSYBOX_EXTRA_LDFLAGS=""
FREETZ_BUSYBOX_EXTRA_LDLIBS=""
FREETZ_BUSYBOX_NO_DEBUG_LIB=y
FREETZ_BUSYBOX_INSTALL_APPLET_SYMLINKS=y
FREETZ_BUSYBOX_PREFIX="./_install"
FREETZ_BUSYBOX_PASSWORD_MINLEN=6
FREETZ_BUSYBOX_MD5_SMALL=1
FREETZ_BUSYBOX_SHA3_SMALL=1
FREETZ_BUSYBOX_FEATURE_USE_TERMIOS=y
FREETZ_BUSYBOX_FEATURE_EDITING=y
FREETZ_BUSYBOX_FEATURE_EDITING_MAX_LEN=1024
FREETZ_BUSYBOX_FEATURE_EDITING_HISTORY=255
FREETZ_BUSYBOX_FEATURE_TAB_COMPLETION=y
FREETZ_BUSYBOX_FEATURE_EDITING_FANCY_PROMPT=y
FREETZ_BUSYBOX_FEATURE_NON_POSIX_CP=y
FREETZ_BUSYBOX_FEATURE_COPYBUF_KB=64
FREETZ_BUSYBOX_FEATURE_SKIP_ROOTFS=y
FREETZ_BUSYBOX_MONOTONIC_SYSCALL=y
FREETZ_BUSYBOX_IOCTL_HEX2STR_ERROR=y
FREETZ_BUSYBOX_FEATURE_HWIB=y
FREETZ_BUSYBOX_FEATURE_SEAMLESS_GZ=y
FREETZ_BUSYBOX_GUNZIP=y
FREETZ_BUSYBOX_GZIP=y
FREETZ_BUSYBOX_GZIP_FAST=0
FREETZ_BUSYBOX_TAR=y
FREETZ_BUSYBOX_FEATURE_TAR_CREATE=y
FREETZ_BUSYBOX_FEATURE_TAR_FROM=y
FREETZ_BUSYBOX_FEATURE_TAR_OLDGNU_COMPATIBILITY=y
FREETZ_BUSYBOX_FEATURE_TAR_GNU_EXTENSIONS=y
FREETZ_BUSYBOX_BASENAME=y
FREETZ_BUSYBOX_CAT=y
FREETZ_BUSYBOX_DATE=y
FREETZ_BUSYBOX_FEATURE_DATE_ISOFMT=y
FREETZ_BUSYBOX_FEATURE_DATE_COMPAT=y
FREETZ_BUSYBOX_ID=y
FREETZ_BUSYBOX_TEST=y
FREETZ_BUSYBOX_TOUCH=y
FREETZ_BUSYBOX_FEATURE_TOUCH_SUSV3=y
FREETZ_BUSYBOX_TR=y
FREETZ_BUSYBOX_FEATURE_TR_CLASSES=y
FREETZ_BUSYBOX_FEATURE_TR_EQUIV=y
FREETZ_BUSYBOX_CHMOD=y
FREETZ_BUSYBOX_CHOWN=y
FREETZ_BUSYBOX_CHROOT=y
FREETZ_BUSYBOX_CP=y
FREETZ_BUSYBOX_CUT=y
FREETZ_BUSYBOX_DD=y
FREETZ_BUSYBOX_FEATURE_DD_SIGNAL_HANDLING=y
FREETZ_BUSYBOX_DF=y
FREETZ_BUSYBOX_DIRNAME=y
FREETZ_BUSYBOX_DU=y
FREETZ_BUSYBOX_FEATURE_DU_DEFAULT_BLOCKSIZE_1K=y
FREETZ_BUSYBOX_ECHO=y
FREETZ_BUSYBOX_FEATURE_FANCY_ECHO=y
FREETZ_BUSYBOX_ENV=y
FREETZ_BUSYBOX_EXPR=y
FREETZ_BUSYBOX_FALSE=y
FREETZ_BUSYBOX_HEAD=y
FREETZ_BUSYBOX_FEATURE_FANCY_HEAD=y
FREETZ_BUSYBOX_LN=y
FREETZ_BUSYBOX_LS=y
FREETZ_BUSYBOX_FEATURE_LS_FILETYPES=y
FREETZ_BUSYBOX_FEATURE_LS_FOLLOWLINKS=y
FREETZ_BUSYBOX_FEATURE_LS_RECURSIVE=y
FREETZ_BUSYBOX_FEATURE_LS_SORTFILES=y
FREETZ_BUSYBOX_FEATURE_LS_TIMESTAMPS=y
FREETZ_BUSYBOX_FEATURE_LS_USERNAME=y
FREETZ_BUSYBOX_MD5SUM=y
FREETZ_BUSYBOX_MKDIR=y
FREETZ_BUSYBOX_MKFIFO=y
FREETZ_BUSYBOX_MKNOD=y
FREETZ_BUSYBOX_MV=y
FREETZ_BUSYBOX_NOHUP=y
FREETZ_BUSYBOX_PRINTF=y
FREETZ_BUSYBOX_PWD=y
FREETZ_BUSYBOX_REALPATH=y
FREETZ_BUSYBOX_RM=y
FREETZ_BUSYBOX_RMDIR=y
FREETZ_BUSYBOX_SLEEP=y
FREETZ_BUSYBOX_FEATURE_FANCY_SLEEP=y
FREETZ_BUSYBOX_SORT=y
FREETZ_BUSYBOX_STAT=y
FREETZ_BUSYBOX_FEATURE_STAT_FORMAT=y
FREETZ_BUSYBOX_STTY=y
FREETZ_BUSYBOX_SYNC=y
FREETZ_BUSYBOX_TAIL=y
FREETZ_BUSYBOX_FEATURE_FANCY_TAIL=y
FREETZ_BUSYBOX_TEE=y
FREETZ_BUSYBOX_FEATURE_TEE_USE_BLOCK_IO=y
FREETZ_BUSYBOX_TRUE=y
FREETZ_BUSYBOX_TTY=y
FREETZ_BUSYBOX_UNAME=y
FREETZ_BUSYBOX_UNIQ=y
FREETZ_BUSYBOX_UUDECODE=y
FREETZ_BUSYBOX_WC=y
FREETZ_BUSYBOX_YES=y
FREETZ_BUSYBOX_FEATURE_AUTOWIDTH=y
FREETZ_BUSYBOX_FEATURE_HUMAN_READABLE=y
FREETZ_BUSYBOX_FEATURE_MD5_SHA1_SUM_CHECK=y
FREETZ_BUSYBOX_WHICH=y
FREETZ_BUSYBOX_VI=y
FREETZ_BUSYBOX_FEATURE_VI_MAX_LEN=1024
FREETZ_BUSYBOX_FEATURE_VI_8BIT=y
FREETZ_BUSYBOX_FEATURE_VI_COLON=y
FREETZ_BUSYBOX_FEATURE_VI_YANKMARK=y
FREETZ_BUSYBOX_FEATURE_VI_SEARCH=y
FREETZ_BUSYBOX_FEATURE_VI_USE_SIGNALS=y
FREETZ_BUSYBOX_FEATURE_VI_DOT_CMD=y
FREETZ_BUSYBOX_FEATURE_VI_READONLY=y
FREETZ_BUSYBOX_FEATURE_VI_SETOPTS=y
FREETZ_BUSYBOX_FEATURE_VI_SET=y
FREETZ_BUSYBOX_FEATURE_VI_WIN_RESIZE=y
FREETZ_BUSYBOX_FEATURE_VI_ASK_TERMINAL=y
FREETZ_BUSYBOX_AWK=y
FREETZ_BUSYBOX_DIFF=y
FREETZ_BUSYBOX_SED=y
FREETZ_BUSYBOX_FEATURE_ALLOW_EXEC=y
FREETZ_BUSYBOX_FIND=y
FREETZ_BUSYBOX_FEATURE_FIND_PRINT0=y
FREETZ_BUSYBOX_FEATURE_FIND_MTIME=y
FREETZ_BUSYBOX_FEATURE_FIND_MMIN=y
FREETZ_BUSYBOX_FEATURE_FIND_PERM=y
FREETZ_BUSYBOX_FEATURE_FIND_TYPE=y
FREETZ_BUSYBOX_FEATURE_FIND_XDEV=y
FREETZ_BUSYBOX_FEATURE_FIND_MAXDEPTH=y
FREETZ_BUSYBOX_FEATURE_FIND_NEWER=y
FREETZ_BUSYBOX_FEATURE_FIND_INUM=y
FREETZ_BUSYBOX_FEATURE_FIND_EXEC=y
FREETZ_BUSYBOX_FEATURE_FIND_USER=y
FREETZ_BUSYBOX_FEATURE_FIND_GROUP=y
FREETZ_BUSYBOX_FEATURE_FIND_NOT=y
FREETZ_BUSYBOX_FEATURE_FIND_DEPTH=y
FREETZ_BUSYBOX_FEATURE_FIND_PAREN=y
FREETZ_BUSYBOX_FEATURE_FIND_SIZE=y
FREETZ_BUSYBOX_FEATURE_FIND_PRUNE=y
FREETZ_BUSYBOX_FEATURE_FIND_PATH=y
FREETZ_BUSYBOX_FEATURE_FIND_REGEX=y
FREETZ_BUSYBOX_GREP=y
FREETZ_BUSYBOX_FEATURE_GREP_EGREP_ALIAS=y
FREETZ_BUSYBOX_FEATURE_GREP_FGREP_ALIAS=y
FREETZ_BUSYBOX_FEATURE_GREP_CONTEXT=y
FREETZ_BUSYBOX_XARGS=y
FREETZ_BUSYBOX_FEATURE_XARGS_SUPPORT_CONFIRMATION=y
FREETZ_BUSYBOX_FEATURE_XARGS_SUPPORT_QUOTES=y
FREETZ_BUSYBOX_FEATURE_XARGS_SUPPORT_TERMOPT=y
FREETZ_BUSYBOX_FEATURE_XARGS_SUPPORT_ZERO_TERM=y
FREETZ_BUSYBOX_HALT=y
FREETZ_BUSYBOX_INIT=y
FREETZ_BUSYBOX_FEATURE_USE_INITTAB=y
FREETZ_BUSYBOX_FEATURE_KILL_REMOVED=y
FREETZ_BUSYBOX_FEATURE_KILL_DELAY=0
FREETZ_BUSYBOX_FEATURE_INIT_SYSLOG=y
FREETZ_BUSYBOX_INIT_TERMINAL_TYPE="linux"
FREETZ_BUSYBOX_FEATURE_SHADOWPASSWDS=y
FREETZ_BUSYBOX_USE_BB_CRYPT=y
FREETZ_BUSYBOX_ADDUSER=y
FREETZ_BUSYBOX_FIRST_SYSTEM_ID=100
FREETZ_BUSYBOX_LAST_SYSTEM_ID=999
FREETZ_BUSYBOX_ADDGROUP=y
FREETZ_BUSYBOX_FEATURE_ADDUSER_TO_GROUP=y
FREETZ_BUSYBOX_DELUSER=y
FREETZ_BUSYBOX_DELGROUP=y
FREETZ_BUSYBOX_FEATURE_DEL_USER_FROM_GROUP=y
FREETZ_BUSYBOX_LOGIN=y
FREETZ_BUSYBOX_PASSWD=y
FREETZ_BUSYBOX_FEATURE_PASSWD_WEAK_CHECK=y
FREETZ_BUSYBOX_CRYPTPW=y
FREETZ_BUSYBOX_FEATURE_DEFAULT_PASSWD_ALGO="des"
FREETZ_BUSYBOX_INSMOD=y
FREETZ_BUSYBOX_RMMOD=y
FREETZ_BUSYBOX_LSMOD=y
FREETZ_BUSYBOX_FEATURE_LSMOD_PRETTY_2_6_OUTPUT=y
FREETZ_BUSYBOX_MODPROBE=y
FREETZ_BUSYBOX_FEATURE_CHECK_TAINTED_MODULE=y
FREETZ_BUSYBOX_DEFAULT_MODULES_DIR="/lib/modules"
FREETZ_BUSYBOX_DEFAULT_DEPMOD_FILE="modules.dep"
FREETZ_BUSYBOX_BLKID=y
FREETZ_BUSYBOX_FEATURE_BLKID_TYPE=y
FREETZ_BUSYBOX_DMESG=y
FREETZ_BUSYBOX_FEATURE_DMESG_PRETTY=y
FREETZ_BUSYBOX_GETOPT=y
FREETZ_BUSYBOX_FEATURE_GETOPT_LONG=y
FREETZ_BUSYBOX_MKSWAP=y
FREETZ_BUSYBOX_MOUNT=y
FREETZ_BUSYBOX_FEATURE_MOUNT_VERBOSE=y
FREETZ_BUSYBOX_FEATURE_MOUNT_NFS=y
FREETZ_BUSYBOX_FEATURE_MOUNT_CIFS=y
FREETZ_BUSYBOX_FEATURE_MOUNT_FLAGS=y
FREETZ_BUSYBOX_FEATURE_MOUNT_FSTAB=y
FREETZ_BUSYBOX_PIVOT_ROOT=y
FREETZ_BUSYBOX_SWAPONOFF=y
FREETZ_BUSYBOX_UMOUNT=y
FREETZ_BUSYBOX_FEATURE_UMOUNT_ALL=y
FREETZ_BUSYBOX_FEATURE_MOUNT_LOOP=y
FREETZ_BUSYBOX_FEATURE_MOUNT_LOOP_CREATE=y
FREETZ_BUSYBOX_VOLUMEID=y
FREETZ_BUSYBOX_FEATURE_VOLUMEID_EXT=y
FREETZ_BUSYBOX_FEATURE_VOLUMEID_FAT=y
FREETZ_BUSYBOX_FEATURE_VOLUMEID_NTFS=y
FREETZ_BUSYBOX_CROND=y
FREETZ_BUSYBOX_FEATURE_CROND_DIR="/var/spool/cron"
FREETZ_BUSYBOX_CRONTAB=y
FREETZ_BUSYBOX_MAKEDEVS=y
FREETZ_BUSYBOX_FEATURE_MAKEDEVS_TABLE=y
FREETZ_BUSYBOX_PING=y
FREETZ_BUSYBOX_PING6=y
FREETZ_BUSYBOX_FEATURE_FANCY_PING=y
FREETZ_BUSYBOX_STUN_IP=y
FREETZ_BUSYBOX_WHOIS=y
FREETZ_BUSYBOX_FEATURE_IPV6=y
FREETZ_BUSYBOX_FEATURE_PREFER_IPV4_ADDRESS=y
FREETZ_BUSYBOX_BRCTL=y
FREETZ_BUSYBOX_ETHER_WAKE=y
FREETZ_BUSYBOX_HOSTNAME=y
FREETZ_BUSYBOX_HTTPD=y
FREETZ_BUSYBOX_FEATURE_HTTPD_BASIC_AUTH=y
FREETZ_BUSYBOX_FEATURE_HTTPD_AUTH_MD5=y
FREETZ_BUSYBOX_FEATURE_HTTPD_CGI=y
FREETZ_BUSYBOX_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR=y
FREETZ_BUSYBOX_FEATURE_HTTPD_ENCODE_URL_STR=y
FREETZ_BUSYBOX_IFCONFIG=y
FREETZ_BUSYBOX_FEATURE_IFCONFIG_STATUS=y
FREETZ_BUSYBOX_FEATURE_IFCONFIG_HW=y
FREETZ_BUSYBOX_FEATURE_IFCONFIG_BROADCAST_PLUS=y
FREETZ_BUSYBOX_IFUPDOWN=y
FREETZ_BUSYBOX_IFUPDOWN_IFSTATE_PATH="/var/run/ifstate"
FREETZ_BUSYBOX_FEATURE_IFUPDOWN_IFCONFIG_BUILTIN=y
FREETZ_BUSYBOX_FEATURE_IFUPDOWN_IPV4=y
FREETZ_BUSYBOX_FEATURE_IFUPDOWN_IPV6=y
FREETZ_BUSYBOX_FEATURE_IFUPDOWN_MAPPING=y
FREETZ_BUSYBOX_INETD=y
FREETZ_BUSYBOX_IP=y
FREETZ_BUSYBOX_FEATURE_IP_ADDRESS=y
FREETZ_BUSYBOX_FEATURE_IP_LINK=y
FREETZ_BUSYBOX_FEATURE_IP_ROUTE=y
FREETZ_BUSYBOX_FEATURE_IP_TUNNEL=y
FREETZ_BUSYBOX_NETSTAT=y
FREETZ_BUSYBOX_FEATURE_NETSTAT_PRG=y
FREETZ_BUSYBOX_ROUTE=y
FREETZ_BUSYBOX_TELNETD=y
FREETZ_BUSYBOX_FEATURE_TELNETD_STANDALONE=y
FREETZ_BUSYBOX_VCONFIG=y
FREETZ_BUSYBOX_TOP=y
FREETZ_BUSYBOX_FEATURE_TOP_CPU_USAGE_PERCENTAGE=y
FREETZ_BUSYBOX_FEATURE_TOP_CPU_GLOBAL_PERCENTS=y
FREETZ_BUSYBOX_UPTIME=y
FREETZ_BUSYBOX_FREE=y
FREETZ_BUSYBOX_KILL=y
FREETZ_BUSYBOX_KILLALL=y
FREETZ_BUSYBOX_PIDOF=y
FREETZ_BUSYBOX_FEATURE_PIDOF_SINGLE=y
FREETZ_BUSYBOX_FEATURE_PIDOF_OMIT=y
FREETZ_BUSYBOX_PS=y
FREETZ_BUSYBOX_FEATURE_PS_WIDE=y
FREETZ_BUSYBOX_FEATURE_PS_LONG=y
FREETZ_BUSYBOX_BB_SYSCTL=y
FREETZ_BUSYBOX_ASH=y
FREETZ_BUSYBOX_ASH_BASH_COMPAT=y
FREETZ_BUSYBOX_ASH_JOB_CONTROL=y
FREETZ_BUSYBOX_ASH_ALIAS=y
FREETZ_BUSYBOX_ASH_GETOPTS=y
FREETZ_BUSYBOX_ASH_BUILTIN_ECHO=y
FREETZ_BUSYBOX_ASH_BUILTIN_PRINTF=y
FREETZ_BUSYBOX_ASH_BUILTIN_TEST=y
FREETZ_BUSYBOX_ASH_CMDCMD=y
FREETZ_BUSYBOX_ASH_OPTIMIZE_FOR_SIZE=y
FREETZ_BUSYBOX_ASH_EXPAND_PRMT=y
FREETZ_BUSYBOX_FEATURE_SH_IS_ASH=y
FREETZ_BUSYBOX_FEATURE_BASH_IS_NONE=y
FREETZ_BUSYBOX_SH_MATH_SUPPORT=y
FREETZ_BUSYBOX_FEATURE_SH_STANDALONE=y
FREETZ_BUSYBOX_FEATURE_SH_NOFORK=y
FREETZ_BUSYBOX_SYSLOGD=y
FREETZ_BUSYBOX_FEATURE_ROTATE_LOGFILE=y
FREETZ_BUSYBOX_FEATURE_REMOTE_LOG=y
FREETZ_BUSYBOX_FEATURE_SYSLOGD_DUP=y
FREETZ_BUSYBOX_FEATURE_SYSLOGD_READ_BUFFER_SIZE=256
FREETZ_BUSYBOX_FEATURE_IPC_SYSLOG=y
FREETZ_BUSYBOX_FEATURE_IPC_SYSLOG_BUFFER_SIZE=16
FREETZ_BUSYBOX_LOGREAD=y
FREETZ_BUSYBOX_FEATURE_LOGREAD_REDUCED_LOCKING=y
FREETZ_BUSYBOX_KLOGD=y
FREETZ_BUSYBOX_FEATURE_KLOGD_KLOGCTL=y
FREETZ_BUSYBOX_LOGGER=y
EXTERNAL_ENABLED=y
EXTERNAL_LINKS=y
EXTERNAL_SUBDIRS=y
EXTERNAL_CREATEPAK=y
EXTERNAL_OWN_FILES=""
EXTERNAL_FREETZ_PACKAGE_DOSFSTOOLS=y
EXTERNAL_FREETZ_PACKAGE_DOSFSTOOLS_dosfsck=y
EXTERNAL_FREETZ_PACKAGE_DOSFSTOOLS_dosfslabel=y
EXTERNAL_FREETZ_PACKAGE_E2FSPROGS=y
EXTERNAL_FREETZ_PACKAGE_E2FSPROGS_e2fsck=y
EXTERNAL_FREETZ_PACKAGE_E2FSPROGS_fsck=y
EXTERNAL_FREETZ_PACKAGE_E2FSPROGS_mklost_found=y
EXTERNAL_FREETZ_PACKAGE_E2FSPROGS_tune2fs=y
EXTERNAL_FREETZ_PACKAGE_E2FSPROGS_dumpe2fs=y
EXTERNAL_FREETZ_PACKAGE_E2FSPROGS_debugfs=y
EXTERNAL_FREETZ_PACKAGE_E2FSPROGS_resize2fs=y
EXTERNAL_FREETZ_PACKAGE_WOL=y
EXTERNAL_FREETZ_PACKAGE_DROPBEAR=y
EXTERNAL_FREETZ_PACKAGE_OPENDD=y
EXTERNAL_FREETZ_PACKAGE_USBIP=y
EXTERNAL_FREETZ_PACKAGE_VSFTPD=y
FREETZ_LANG_DE=y
FREETZ_LANG_STRING="de"
FREETZ_SECURITY_LEVEL=0
FREETZ_STYLE_COLORED=y
FREETZ_STYLE="colored"
FREETZ_SKIN_legacy=y
FREETZ_FAVICON_CUMA=y
FREETZ_FAVICON_STRING="cuma"
FREETZ_TAGGING_CUMA=y
FREETZ_TAGGING_STRING="cuma"
FREETZ_MODIFY_AVM_VERSION=y
FREETZ_USER_DEFINED_COMMENT=""
FREETZ_CREATE_SEPARATE_OPTIONS_CFG=y
FREETZ_DOWNLOAD_TOOLCHAIN=y
FREETZ_GCC_4_6_COMPILED_KERNEL=y
FREETZ_UCLIBC_0_9_32_BASED_BOX=y
FREETZ_KERNEL_BINUTILS_2_22=y
FREETZ_KERNEL_COMPILER_GCC_4_6=y
FREETZ_KERNEL_BINUTILS_VERSION="2.22"
FREETZ_KERNEL_GCC_VERSION="4.6.4"
FREETZ_TARGET_UCLIBC_VERSION_0_9_32=y
FREETZ_TARGET_BINUTILS_2_22=y
FREETZ_TARGET_COMPILER_GCC_4_6=y
FREETZ_STDCXXLIB_USE_UCLIBCXX=y
FREETZ_TARGET_UCLIBC_VERSION="0.9.32.1"
FREETZ_TARGET_BINUTILS_VERSION="2.22"
FREETZ_TARGET_GCC_VERSION="4.6.4"
FREETZ_GNULIBSTDCXX_VERSION="6.0.16"
FREETZ_STDCXXLIB="uclibcxx"
FREETZ_TARGET_UCLIBC_REF="mod"
FREETZ_TARGET_CFLAGS="-Os -pipe -Wa,--trap"
FREETZ_TARGET_UCLIBC_REDUCED_LOCALE_SET=y
FREETZ_TARGET_LFS=y
FREETZ_TOOLCHAIN_MINIMIZE_REQUIRED_GLIBC_VERSION=y
FREETZ_VERBOSITY_LEVEL=0
FREETZ_SIZEINFO_COMPRESSED=y
FREETZ_JLEVEL=2
FREETZ_CHECK_CHANGED=y
FREETZ_STRIP_BINARIES=y
FREETZ_STRIP_MODULES_FREETZ=y
FREETZ_DL_SITE_USER=""
FREETZ_DL_TOOLCHAIN_SITE=""
FREETZ_DL_KERNEL_TOOLCHAIN_VERSION="r10381"
FREETZ_DL_KERNEL_TOOLCHAIN_MD5="4622c6e00b05f6369ed3d777acb57ad2"
FREETZ_DL_TARGET_TOOLCHAIN_VERSION="r10381"
FREETZ_DL_TARGET_TOOLCHAIN_MD5="b3d4da39d502edb1efa35930cd612a8c"
FREETZ_DL_TOOLCHAIN_SUFFIX="shared-glibc"
FREETZ_DL_KERNEL_SITE=""
FREETZ_DL_KERNEL_SOURCE="${FREETZ_AVM_VERSION_STRING}-release_kernel.tar.xz"
FREETZ_DL_KERNEL_SOURCE_MD5="59988c29ccb3f75a916d203024e445ce"
FREETZ_DL_SITE="@AVM/fritzbox.fon_wlan_7390/firmware/deutsch"
FREETZ_DL_SOURCE="FRITZ.Box_Fon_WLAN_7390.AnnexB.84.05.52.image"
FREETZ_DL_SOURCE_MD5="89c495eac9743d2eb97e9e1889539a21"
FREETZ_REPLACE_KERNEL_AVAILABLE=y
FREETZ_REPLACE_MODULE_AVAILABLE=y
FREETZ_HAS_AVM_LABOR=y
FREETZ_HAS_AVM_FW55X=y
FREETZ_HAS_AVM_FW52X=y
FREETZ_HAS_AVM_LANG_DE=y
FREETZ_HAS_AVM_LANG_EN=y
FREETZ_HAS_AVM_PRINTK=y
FREETZ_HAS_AVM_PTY_SUPPORT=y
FREETZ_HAS_AVM_AURA_USB=y
FREETZ_HAS_AVM_NTFS=y
FREETZ_HAS_AVM_IPV6=y
FREETZ_HAS_AVM_WEBDAV=y
FREETZ_HAS_AVM_INETD=y
FREETZ_HAS_AVM_EXT3=y
FREETZ_HAS_AVM_TR069=y
FREETZ_HAS_AVM_TR069_FWUPDATE=y
FREETZ_HAS_AVM_CHRONYD=y
FREETZ_HAS_AVM_DECT=y
FREETZ_HAS_AVM_OPENSSL_LIBS=y
FREETZ_HAS_AVM_LSOF=y
FREETZ_HAS_AVM_SOCAT=y
FREETZ_HAS_AVM_NAS=y
FREETZ_HAS_AVM_MYFRITZ=y
FREETZ_HAS_AVM_FHEM=y
FREETZ_HAS_AVM_PHONE=y
FREETZ_HAS_AVM_TAM=y
FREETZ_HAS_AVM_UDEV=y
FREETZ_HAS_AVM_USB_HOST=y
FREETZ_HAS_AVM_E2FSPROGS=y
FREETZ_HAS_AVM_WLAN=y
FREETZ_HAS_AVM_UMTS=y
FREETZ_HAS_AVM_JUNK_BYTES=y
FREETZ_HAS_AVM_MULTI_ANNEX=y
FREETZ_HAS_AVM_RAMZSWAP=y
FREETZ_HAS_AVM_AHA=y
FREETZ_INSTALL_BASE=y
FREETZ_REPLACE_BUSYBOX=y
FREETZ_TARGET_ARCH_BE=y
FREETZ_TARGET_ARCH="mips"
FREETZ_TARGET_CROSS="mips-linux-uclibc-"
FREETZ_TARGET_MAKE_PATH="toolchain/target/bin"
FREETZ_KERNEL_CROSS="mips-unknown-linux-gnu-"
FREETZ_KERNEL_MAKE_PATH="toolchain/kernel/bin"
FREETZ_FILESYSTEM_MTD_SIZE=0
FREETZ_AVM_VERSION_7390_05_50=y
FREETZ_AVM_VERSION_05_2X_MIN=y
FREETZ_AVM_VERSION_05_5X_MIN=y
FREETZ_AVM_VERSION_05_5X=y
FREETZ_AVM_VERSION_STRING="7390_05.50"
FREETZ_TYPE_PREFIX="7390"
FREETZ_TYPE_PREFIX_SERIES_SUBDIR="05_5X"

 

[MaxMuster]

In dem Image ist iptables nicht enthalten. Das müsste integriert werden.
Dazu musst du "Experte" sein, dann erscheint unter den Paketen auch der "Unstable" Bereich.
Dort iptables (und der Einfachheit wegen am besten auch gliech "Iptables-CGI 1.1") wählen