Hello,I still have problems with the firewall rules in openwrt branch. If I execute hipfw (with or without flags) the firewall reads all the rules, I checked it in DEBUG mode, but even have 2000 rules in the file it doesn't check them because the performance is the same.
I am lost and I don't have any idea what happens. These are the outputs of iptables and ip6tables: Chain INPUT (policy ACCEPT) target prot opt source destination HIPFW-INPUT all -- anywhere anywhere Chain FORWARD (policy ACCEPT) target prot opt source destination HIPFW-FORWARD all -- anywhere anywhere Chain OUTPUT (policy ACCEPT) target prot opt source destination HIPFW-OUTPUT all -- anywhere anywhere Chain HIPFW-FORWARD (1 references) target prot opt source destination QUEUE udp -- anywhere anywhere udp spt:50500 QUEUE udp -- anywhere anywhere udp dpt:50500 QUEUE esp -- anywhere anywhere QUEUE 139 -- anywhere anywhere Chain HIPFW-INPUT (1 references) target prot opt source destination QUEUE udp -- anywhere anywhere udp spt:50500 QUEUE udp -- anywhere anywhere udp dpt:50500 QUEUE esp -- anywhere anywhere QUEUE 139 -- anywhere anywhere Chain HIPFW-OUTPUT (1 references) target prot opt source destination QUEUE udp -- anywhere anywhere udp spt:50500 QUEUE udp -- anywhere anywhere udp dpt:50500 QUEUE esp -- anywhere anywhere QUEUE 139 -- anywhere anywhere root@OpenWrt:/# ip6tables -L Chain INPUT (policy ACCEPT) target prot opt source destination HIPFW-INPUT all anywhere anywhere Chain FORWARD (policy ACCEPT) target prot opt source destination HIPFW-FORWARD all anywhere anywhere Chain OUTPUT (policy ACCEPT) target prot opt source destination HIPFW-OUTPUT all anywhere anywhere Chain HIPFW-FORWARD (1 references) target prot opt source destination QUEUE udp anywhere anywhere udp spt:50500 QUEUE udp anywhere anywhere udp dpt:50500 QUEUE esp anywhere anywhere QUEUE 139 anywhere anywhere Chain HIPFW-INPUT (1 references) target prot opt source destination QUEUE udp anywhere anywhere udp spt:50500 QUEUE udp anywhere anywhere udp dpt:50500 QUEUE esp anywhere anywhere QUEUE 139 anywhere anywhere Chain HIPFW-OUTPUT (1 references) target prot opt source destination QUEUE udp anywhere anywhere udp spt:50500 QUEUE udp anywhere anywhere udp dpt:50500 QUEUE esp anywhere anywhere QUEUE 139 anywhere anywhere Thanks, Jordi