Don't you wish there was an easy way to set up port forwarding and other firewall / routing rules in your magnia? When Toshiba released the upgraded SG30, they didn't just upgrade the hardware! They added the ability for the user to edit firewall rules. I don't know why they haven't made this upgrade available to SG20 users. It does seem to work fine. For all I know there is a fatal flaw, however, so keep that in mind.

Upgrading your SG20 Firewall rules and adding port forwarding.

This process does work, port forwarding does work.
The following have been verified as issues:
IPSec VPN no longer works. PPTP unaffected. FIX AVAILABLE
(IPSEC interface ipsec0 incorrectly labeled as ipsec1 in IPTABLES)

Any issues found will be addressed here:
Fixes for Firewall Rules Update

Following these steps will not JUST give you the ability to edit I/O rules and Port Forwarding. It will also FUNDAMENTALLY change the structure of your firewall to a newer version.

Step 1: Delete all rules (directories) from /sa2/firewall.
WebMin -> Others -> File Manager

Step 2: You might want to BACK UP your system!
8282 -> System -> 2nd Disk -> Take Snapshot

Step 3: Install the four RPM's.
WebMin -> System -> Software Packages

You may download the RPM's here.
Sa2_enLangEnWebAdmin3000network2000firewall 3.0.0-1
NetFirewallRULES 2.0.10-1
NetFirewallMW 2.0.60-1
NetFirewallUI 2.0.8-1 *** checkbox "Ignore Dependencies"

Now go to 8282 -> Network -> Firewall -> Customize

The RPM's are from Toshiba. Since you cannot use them without an SA2 scripting administration interface already installed, I don't think it violates any copyrights or license agreements for me to make these available. If, however, Toshiba requests that I remove the files or article, I will do so.

AGAIN: YOU CANNOT USE THESE RPM'S UNLESS YOU HAVE AN SA2 PACKAGE LIKE THE ONE PICTURED ABOVE. LARGE NUMBERS OF CRITICAL FILES ARE NOT INCLUDED HERE.

Files affected by this patch:

   /sa2/web/admin/3000network/2000firewall/ ENTIRE
   /sa2/triggers/started/lcdmsg/32firewall
   /sa2/triggers/network/mod_ip/20ipchains
   /sa2/triggers/mod_firewall/10iptables
   /sa2/triggers/mod_firewall/20lcdmsg
   /sa2/triggers/firstboot/11firewall_defaults
   /sa2/triggers/common/ipchains
   /sa2/templates/etc/sysconfig/iptables.sh/ ENTIRE
   /sa2/templates/etc/rc.d/init.d/iptables/ ENTIRE
   /sa2/lib/site_perl/SA/Network/Firewall.pm
   /sa2/lang/en/web/admin/3000network/2000firewall/ ENTIRE
   /sa2/firewall ENTIRE

Remember: Questions can be posted in the FORUM section.

Article last modified: Sat Oct 15, 2011 6:06 am