hankventure
New Around Here
If you add iptable rules by running iptables cmds manually. They will reset to default NG rules after router reboot or internal firewall restart. You need to add your rules in shell script '/opt/scripts/firewall-start.sh'. Make sure the script is executable.
Create shell script firewall-start.sh with rules
chmod 0755 /opt/scripts/firewall-start.sh
/usr/sbin/net-wall rule
/usr/sbin/net-wall start
You are good till next firmware update, which you can automate with usb drive and post-mount.sh. (mentioned in voxel readme.doc)
i had done this after i set it manually and it was all working. i had internet on all vlan subnets, and wanted to test the script. i rebooted but the router would not get an ip from my fiber ONT. i tried rebooting both a few times and knew something was up. i looked at iptables and a few things were missing somehow. i reset the router, redid my couple settings, and redid it all over... except...
this time i actually did the chmod, and now it works flawless. i can reboot the router and it all persists. not sure why the lack of chmod nuked my iptables... but thanks a million!