'IPtables NAT extra' Package does not reload 'Firewall - Custom Rules'

we have iptables NETMAP Firewall Rules in the ‘Firewall - custom rules’. this worked for years. in version RUT9M_R_00.07.13 you moved ‘IPtables NAT extra’ to a package, breaking our script. after a firmware update the script is executed on startup, but package reinstallation is not ready at this point and the custom rules fail.
so i created a custom startup script, checking, if ‘xt_NETMAP’ module exists in a loop and starting ‘/etc/firewall.user’ - this worked until version RUT9M_R_00.07.14 where you decided to execute /etc/rc.local as admin and not as root, making it impossible to call ‘/etc/firewall.user’ from this script. can you please fix this, so that i do not need a new workaround every update?
it seems that /sbin/package_restore.lua has an option PKG_NET_RESTART to restart networking if a package needs this. maybe you could add this to the ‘IPtables NAT extra’ package?

1 Like

In RUT9M_R_00.07.14.3 /etc/rc.local gets executed as root again - thanks