Location of iptables config file for Rasberry Pi

jzza · September 1, 2018 at 11:20 AM

Hi, I can set temporary iptable rules via ssh but I don't know what the location is to save them permanently to a config file. I've tried /flash/firewall.conf and also in sbin but these don't work. Any advice appreciated.

**vpeter** · September 1, 2018 at 1:27 PM

Code

# for ipv4
/storage/.config/iptables/rules.v4
# for ipv6 (I think)
/storage/.config/iptables/rules.v6

jzza · September 1, 2018 at 2:04 PM

Thanks vpeter

jzza · September 1, 2018 at 8:10 PM

I have tried adding rules to:

/storage/.config/iptables/rules.v4

And it doesn't seem to work, upon reboot the rules are set to the default. Any ideas?

Thanks

**vpeter** · September 2, 2018 at 6:51 AM

When you have rules set then save them with iptables-save

Code

iptables-save > /storage/.config/iptables/rules.v4

After reboot they should be picked up.

jzza · September 2, 2018 at 10:42 AM

Unfortunately it still doesn't work. On reboot the default rules are set.

I think the location might be wrong as the saved rules file doesn't seem to be loaded. I've tried in the flash directory but that doesn't work either.

jzza · September 2, 2018 at 12:51 PM

I got this working by putting putting the rules into:

/storage/.config/autostart.sh

The rules are then applied at boot. Might not be the proper way but it works fine.

**vpeter** · September 2, 2018 at 1:24 PM

Did you even enable firewall in LibreELEC settings? There are 4 options: Custom/Off/Home/Public. Set to custom and it will be used on boot.

jzza · September 2, 2018 at 1:53 PM

I didn't notice the firewall setting, is it in the LibreELEC settings in Kodi or is it done via the config.txt or another method? thanks.

**vpeter** · September 2, 2018 at 1:56 PM

LibreELEC settings in Kodi

jzza · September 2, 2018 at 2:28 PM

I've looked through all settings options in the LibreELEC settings menu in Kodi and I can't see an option for the firewall. Could you please tell me what section within the settings menu it is within. thanks.

**vpeter** · September 2, 2018 at 2:41 PM

Maybe you should tell us which image are you using? Maybe this functionality is not even in your build.

jzza · September 2, 2018 at 2:46 PM

That's probably what it is. I downloaded the installer from downloads – LibreELEC and selected 'Raspberry Pi v2 and Raspberry Pi v3'

**vpeter** · September 2, 2018 at 2:57 PM

You are using LibreELEC v8 which doesn't have this functionality. That's why you need to run it from autostart.sh or make appropriate service.