Asuswrt official iptables-save not saving changes permanently

[savage75]

Hi folks!
Trying to set a rule on iptables for nat permanently but no luck ?

iptables -t nat -A POSTROUTING -s 10.2.0.0/24 -o br0 -j MASQUERADE

I tried using

iptables-save -t nat

or just
iptables-save

but still no success and every changes will disappear after restarting ??

any ideas how I can solve this ?

thanks

 

[ColinTaylor]

iptables-save does not "save" anything. It just dumps the rules so that they might be read by a human or another process.

iptables-save(8) - Linux manual page

Starting any line with a # character means that it's a comment and what follows on that line is ignored. So the following two lines do nothing at all:

#iptables-save -t nat
# blah blah blah

I'm not aware of a way on stock firmware of making permanent changes to the firewall rules.

 

[savage75]

iptables-save does not "save" anything. It just dumps the rules so that they might be read by a human or another process.

iptables-save(8) - Linux manual page

Starting any line with a # character means that it's a comment and what follows on that line is ignored. So the following two lines do nothing at all:

#iptables-save -t nat
# blah blah blah

I'm not aware of a way on stock firmware of making permanent changes to the firewall rules.

ahha! sorry that was a mistyped. I don't run these commands by # so thats not the issue.

so if I understand right there is no way to solve this ?

 

[savage75]

I'm running wireguard vpn and it needs changes for nat so I can reach my local network connected devices
is there a way to run this when the connection to the VPN is UP?

iptables -t nat -A POSTROUTING -s 10.2.0.0/24 -o br0 -j MASQUERADE

or any other suggestions

 

[savage75]

ok thanks but could you describe how can I add the role above as a route? because I tried it before but no luck.

 

[savage75]

here is the route looks like what I need to add for GW, Metric and Interface?

 

[Coal]

but still no success and every changes will disappear after restarting ??

any ideas how I can solve this ?

For anyone wondering I posted the solution here

Wireguard VPN connected peers can't reach local network devices

Hi folks! Trying to set Wireguard VPN on ASUS ZenWiFi AX (XT8) so I can access my local network through it (as below) Peer1 (10.6.0.2) connects successfully to the wireguard server, also it can ping 10.6.0.1 (wgs1) and 192.168.0.2 (LAN) but can’t connect to other devices on (192.168.0.0/24)...

www.snbforums.com