Is firewall.@defaults[1] possible as a section?

shodanx · April 6, 2026, 5:09am

I am making a script that deals with
firewall.@defaults[0]...

And I was wondering why is it called defaults[0]
Is it possible there could be firewall.@defaults[1]
What would that mean ?

Thanks

xize · April 6, 2026, 5:27am

It would basically just mean the next node, when there is one.

If you want the last node you use firewall.@defaults[-1].

But for the node type defaults there is usually only just one .

But for firewall.@zone[x] there are more.

If you want to get one by name programatically more for developers there is a script which you can use as source in /lib/functions.sh see:

dave14305 · April 6, 2026, 11:27am

firewall4 will read all defaults sections, but will reject anything beyond the first.

github.com/openwrt/firewall4

root/usr/share/ucode/fw4.uc

b6e515752


      
          		// Read helper mapping
          		//
          
          		this.cursor.foreach("helpers", "helper", h => self.parse_helper(h));
          
          
          		//
          		// Read default policies
          		//
          
          		this.cursor.foreach("firewall", "defaults", d => self.parse_defaults(d));
          
          		if (!this.state.defaults)
          			this.parse_defaults({});
          
          
          		//
          		// Build list of ipsets
          		//
          
          		if (!this.state.ipsets) {

github.com/openwrt/firewall4

root/usr/share/ucode/fw4.uc

b6e515752


      
          	parse_defaults: function(data) {
          		if (this.state.defaults) {
          			this.warn_section(data, ": ignoring duplicate defaults section");
          			return;
          		}

shodanx · April 6, 2026, 12:45pm

thanks for this thorough answer