[Bugsysiegals]

I've a huge amount of configuration on my router and have recently been working with iptables to secure my security cameras, etc. During this process, I'm seeing all kinds of iptables rules I don't think should be there. I'd like to flash back to default, see what the default iptables rules are, slowly add back in settings, and keep an eye on how iptables rules change over time so I can better understand what should and should not be present.

All that said, if I use Administration > Backup Configuration and hard reset, will a restore of this file bring back everything or are there things it doesn't backup?

[Alozaros]

there are some default iptables rules even after restart, there is also a moment that those rules are created when you have a WAN access if you flash the router without a WAN they are not created until then...
in relation to isolate ip web cam to local use only there is a rule for it so they will not spam outside of your network...
iptables -I FORWARD -i br0 -o $(nvram get wan_iface) -p tcp -s ip of camera -j DROP

[Bugsysiegals]

Thanks for sharing the firewall rule, I'll have to try it later.

Since I have so many rules, I'm afraid about the sequence of them ... is there a way I can validate I have it right by looking in the logs or would I need to post the rules here and have a guru confirm?

[Alozaros]

well... yes there is a specific order how do they get executed and work so if they are not organised well they might not be executed

to check iptables rules, type iptables -vnL and the chain you want to see or just the bear command will show you all the rules at once

you can also choose witch rules comes after another with adding a number to it like this for example

iptables -I INPUT 1 -i vlan2 -m state --state NEW -j REJECT

in my case i don't use numbers but i know i should
for more info
https://wiki.dd-wrt.com/wiki/index.php/Iptables_command

just don't use different save files on different builds...

[mrjcd]

[Bugsysiegals]

I’ve backed up NVRAM variables before and tried to restore them, same build, with no success ... I’m guessing since firewall rules aren’t stored in the variables but rather the /tmp/.ipt file.

I’ve also taken backups using the GUI but never tried to restore so only assume the firewall rules are backed up....

[Wildlion]

The information from Administration->Commands is stored in nvram and is backed up.... I am looking at some from a build right now. If you are doing that it should work, if you are manually adding them via command line then no.

You can always try to do a back up and then search the file, or from command line do a