In the docs, there is still inconsistent info about it: [OpenWrt Wiki] Hotplug Pls, update,if possible. OR, much better, re-implement it. Using hotplug-event would be an elegant solution to re-establish custom routes from rc.local, which actually are wiped ou…

[image] reinerotto: ip rule add fwmark 1088 table 100 ip route add local default dev lo table 100 #/etc/config/network config rule option lookup '100' option mark '1088' config route option interface 'loopback' option type 'local' option target '0.0.…

2021/03/05 01:00 Show differences to current revisions Hotplug – [How it works] add firewall vgaetera @vgaetera there are no ubus callbacks on firewall events (?to log a packet?)

[image] reinerotto: Pls, update,if possible. Updated. [image] reinerotto: much better, re-implement it. https://forum.openwrt.org/t/fw4-and-hotplug/150794/#6-by-jow

Paragraph for “firewall” hotplug. ## firewall firewall3 implements hotplug events when ruleset is partially re-loaded, while firewall4 (OpenWrt 22.03 and later) does not. Similar functionality can be achieved via includes // https://openwrt.org/docs/guide-user/firewall/firewall_configuration#inclu…

Hm …. I used includes for nft-rules, but how do they work to re-establish custom routes after being wiped clean because of fw4-restart ? I thought, the includes have to be nft-cmd style only.

You can create an include in the firewall config file that is a script type versus an nft command file. [OpenWrt Wiki] Firewall configuration /etc/config/firewall

firewall does not manipulate routes, it reloads on netdev hotplugs (fw4 in full fw3 per zone)

Yep. You got it. That solves the problem: config include #In /etc/config/firewall option enabled 1 option type 'script' option path '/etc/setup/myprivateroute' option fw4_compatible 1

echo /etc/setup/myprivateroute >> /etc/sysupgrade.conf

Unfortunately, using include in /etc/config/firewall, setting up custom routing table, does not always work for me. I suspect, from time to time it might interfere with routing mods, done behind the curtain, when network restarted. Which happens several times during startup in my case. One more neg…