Skynet Skynet v8 - Router Firewall & Security Enhancements

[dave14305]

Is saveipset a safe permanent substitute for save in the hourly cron?

No, saveipset doesn’t exist. Is this a recommendation from AI?

 

[rosco9911]

You're correct and I appreciate the correction. That recommendation came from AI assistance and was wrong — saveipset is not a valid v8 command. What I'm actually trying to solve is: Skynet's hourly firewall save triggers notify_rc restart_firewall, which causes YazFi to rebuild all guest network chains for ~19 seconds every hour, dropping all VLAN devices. Is there a supported way in v8 to save ipsets without triggering a full firewall restart? I have custom MAC-based RETURN rules in PREROUTING inserted via a YazFi userscript that appear to be flagged as integrity violations.

 

[dave14305]

I have custom MAC-based RETURN rules in PREROUTING inserted via a YazFi userscript that appear to be flagged as integrity violations.

I was going to say that the firewall should not restart unless an ipset or iptables rule is missing. What specifically does the log say about rule integrity? What does your custom rule look like?