oneone1995

@Achophiark 1 加了;2 是在旁路由上加吗？
其实旁路由可以用 dhcp option 3,6 指定特定设备网关为 openwrt ，这个我用了，但其实感觉目前没有特定设备的需求，全屋都走 clash 了。
在 https://images.newsmth.net/nForum/#!article/LinuxApp/955161 这个帖子搜到了同样的问题。。

@RecursiveG
```
/ip firewall address-list
add address=hello.sn.mynetname.net list=wan-ip
/ip firewall filter
add action=accept chain=input comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=\
"defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related hw-offload=yes
add action=accept chain=forward comment=\
"defconf: accept established,related, untracked" connection-state=\
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=\
invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" \
connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
/ip firewall nat
add action=dst-nat chain=dstnat dst-port=5210 in-interface=pppoe-out1 protocol=\
tcp to-addresses=192.168.88.214 to-ports=5001
add action=masquerade chain=srcnat out-interface=pppoe-out1
add action=dst-nat chain=dstnat dst-port=2222 in-interface=pppoe-out1 protocol=\
tcp to-addresses=192.168.88.214 to-ports=22
add action=dst-nat chain=dstnat dst-port=5211 in-interface=pppoe-out1 protocol=\
tcp to-addresses=192.168.88.210 to-ports=80
add action=dst-nat chain=dstnat dst-port=5212 in-interface=pppoe-out1 protocol=\
tcp to-addresses=192.168.88.214 to-ports=3003
add action=masquerade chain=srcnat disabled=yes out-interface=bridge \
src-address=192.168.88.0/24
add action=dst-nat chain=dstnat disabled=yes dst-address-list=wan-ip dst-port=\
443 in-interface=bridge protocol=tcp to-addresses=192.168.88.214 to-ports=\
5001
add action=dst-nat chain=dstnat disabled=yes dst-address-list=wan-ip dst-port=\
2222 in-interface=bridge protocol=tcp to-addresses=192.168.88.214 to-ports=\
22
```

@zealic 放最下面也不行..

@quzard 600 多吧，可以买 j4125 应该更便宜点

@quzard 买了畅网 N100 开发板 + asm1166 转接卡 + qnas4 背板(闲鱼)、3d 打印机箱(闲鱼)。可以去 B 站搜视频，不太难

@Puteulanus 感谢。最后自己装了 qnas4

@VDarker @Yuhyeong 感谢，群晖推荐买哪个。。423+？