Where are the default iptables stored ?

[Denna]

If you install the Asuswrt-Merlin firmware, wiping out any previous configuration, where are the default iptables rules stored ?

Is there any configuration in the WebGUI that will add/modify/delete iptables rules ?

 

[RMerlin]

There are no "default rules", everything is configured by the firmware code.

 

[sfx2000]

Is there any configuration in the WebGUI that will add/modify/delete iptables rules ?

They're in the firmware, but those are in the realm of the 3rd rail - touch them in the firmware, and you'll die.

There is a mechanism to extend them via scripts - there's plenty of posts/threads on how to do this...

 

[CornfieldWin]

Hard to believe these comments have lasted so long as I have had to begin the same journey. First, Merlinwrt is the firmware which is an embedded linux system, get over it.

The rules are built by shell scripts computing and issuing iptables commands, so there is no passive and declarative file, just the /jffs/scripts/firewall-start script doing its thing to kickoff the entire nearly incomprehensible process.

The convention to add your own rules or override the defaults is to put your iptables commands at the end of /jffs/scripts/firewall-start or possibly create /jffs/scripts/nat-start and make it executable for nat rules. When the router boots or the services restart those scripts will run.

 

[ColinTaylor]

Hard to believe these comments have lasted so long as I have had to begin the same journey. First, Merlinwrt is the firmware which is an embedded linux system, get over it.

The rules are built by shell scripts computing and issuing iptables commands, so there is no passive and declarative file, just the /jffs/scripts/firewall-start script doing its thing to kickoff the entire nearly incomprehensible process.

The convention to add your own rules or override the defaults is to put your iptables commands at the end of /jffs/scripts/firewall-start or possibly create /jffs/scripts/nat-start and make it executable for nat rules. When the router boots or the services restart those scripts will run.

Why are you replying to a post that's over eight years old?

Your answer is also incorrect. The non-custom rules are not built by those user shell scripts but rather they are generated by the firmware code as previously stated by the developer.

 

[RMerlin]