Fw3 reload rule is missing

VxBox · September 20, 2021, 11:38pm

Add multiple custom rules to the /etc/firewall.user file

...
ip6tables -I input_rule -i pppoe-wan -p tcp -d ::ca:30/::ffff:ffff --dport 80 -j ACCEPT
...
ip6tables -t nat -A PREROUTING -i pppoe-wan -p tcp -d ::ca:30/::ffff:ffff --dport 8888 -j DNAT --to-destination [###::ca:30]:8080
...
ip6tables -I zone_wan_input -m conntrack --ctstate DNAT -j ACCEPT
...

I don’t know why, when using the fw3 reload command, ip6tables -I zone_wan_input -m conntrack --ctstate DNAT -j ACCEPT This rule is lost, but the other rules are in . All custom rules using fw3 start are also there.

vgaetera · September 21, 2021, 12:52am

github.com

openwrt/openwrt/blob/master/package/network/config/firewall/files/firewall.user#L5-L7

    
      
          # Internal uci firewall chains are flushed and recreated on reload, so
          # put custom rules into the root chains e.g. INPUT or FORWARD or into the
          # special user chains, e.g. input_wan_rule or postrouting_lan_rule.

VxBox · September 21, 2021, 1:52am

There are too many uncertain things

system · October 1, 2021, 1:53am

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.