How to switch from firewall 3 to firewall 4 on my belkin rt3200

Installing and Using OpenWrt Network and Wireless Configuration
1

hello I would like to switch from firewall 3 to firewall 4 on my belkin rt3200,

how to proceed please

and how to convert iptables to nftables also I looked at this page in passing thank you and happy new year everyone it's just an example

1 Like
2

I just clicked on advanced settings in the sysupgrade options and removed firewall then added firewall4. Seemed to work fine?

2 Likes
3

ok i has also attended sysupgrade i will test thanks for reactivity

i keep informed

Capture d’écran 2022-01-10 à 00.36.13

i delete the last firewall it's just and launch sysupgrade ?

Capture d’écran 2022-01-10 à 00.39.12

4

read here: Firewall4 / NFtables Tips and Tricks

or rely on uci / ubus to translate dscp marking rules for you

2 Likes
5

thanks for all

he has working

i has just put not keep settings for be sure while the update :wink:

i do'nt know if i keep settings if work or not but i has not tested

6

i've tested and for the vast majority it is fine

1 Like
7

ok good

just one things my upnp is broken now is normal ?

table inet miniupnpd {
        chain forward {
                type filter hook forward priority -25; policy accept;
                iif "wan" th dport 3074 @nh,128,32 0xc0a802a0 @nh,72,8 0x11 acce                                                             pt
                iif "wan" th dport 9308 @nh,128,32 0xc0a802a0 @nh,72,8 0x11 acce                                                             pt
        }
}
table ip miniupnpd {
        chain prerouting {
                type nat hook prerouting priority dstnat; policy accept;
                iif "wan" udp dport 3074 dnat to 192.168.2.160:3074
                iif "wan" udp dport 9308 dnat to 192.168.2.160:9308
8

PR4642 issues...

1 Like
9

Did the same switch by removing firewall and chosing firewall4 with auc seems to work fine.

Do you still keep these packages?
iptables
ip6tables
kmod-ipt-offload

1 Like
10

yes i prefere keep iptables and ip6tables

2 Likes
11

Okay thanks I haven't built a new image without them but ran the opkg remove on them. Any reason why you prefer to keep them?

Do you also have to Firewall tabs in luci?

Firewall (nftables)
Firewall (iptables)

12

yes i have two firewall

i use a special script for gaming only with iptables not compatible nftables

1 Like
13

The double entry in luci disappeared after remoing iptables and a reboot.

14

You has remove iptables is normal you has only now nftables

1 Like