Did an updated version that now has it's own configuration tab under the firewall settings, so no need to patch the firewall .lua file. Also, it is now possible to configure the subnets that are blocked and whitelisted. To try the new version, install these packages: http://archive.tohojo.dk/cerowrt/wndr/3.10.32-9-tohojo/packages/bcp38_3-1_ar71xx.ipk http://archive.tohojo.dk/cerowrt/wndr/3.10.32-9-tohojo/packages/luci-app-bcp38_1-1_all.ipk and add the firewall rules as per the previous email. Still a couple of issues: - Manual firewall rules are still required. I think it would probably be better to insert the iptables rules from the script directly so they don't have to be specified in the firewall config file. - Still need to have a hotplug script auto-detect blocked upstream networks and exclude them. -Toke