Rollback version pre FW4 or package: iptables-nft

[wisem2540]

Hey guys,

Just installed OpenWRT on my Archer A7. All I wanted the firmware for was TTL adjustment. Am I able to roll back to a version pre 22.03 where IP tables changed to NFtables? Is that supported on my router?

If not - can someone tell me what the iptables-nft package does? I am looking for the ability to change TTL tules within the web GUI without modifying config files via SSH

[hnyman]

If you are really looking for TTL advice for fw4, you might edit the message title, so that people knowing about that might notice...
This might interest you

Firewall4 / NFtables Tips and Tricks

# /etc/nftables.d/90-mangle-ttl.nft chain mangle_ttl_out { type filter hook postrouting priority mangle; meta nfproto ipv4 oifname eth2 ip ttl set 64 } chain mangle_ttl_in { type filter hook prerouting priority mangle; meta nfproto ipv4 iifname eth2 ip ttl 1 ip ttl set 5 } Notes: If you want to treat IPv6 as well, remove the meta nfproto ipv4 part. nftables does not support an equivalent to iptables' --ttl-inc yet, but since "match ttl 1, increment by 4" is just a static rew…

Search forum for TTL

Then back to topic "what is iptables-nft?":
Iptables-nft is a translation layer that aims to translate outdated iptables commands to nft equivalents and then applies them. Depending on the nft components installed and the complexity of the original iptables command, it may succeed or it may fail.
Iptables-nft is not a core part of the fw4 firewall.