Hi,
I've disabled and re-nabled my Nat selection from the webbox.
All the filter rules have disappeared.
By default is there nothing in the filter rules?
Should I have the either of these enabled?
The "NAT" enabled.
The "protect router?
The "protect lan"
Or are these selected per your own preference and later doing your own filter rule installation?

By default there are no filter rules. "Protect router" installs filter rules in the input chain to filter traffic destined to the router itself. "Protect LAN" - I think - installs filters that don't let traffic from WAN to LAN through unless it was initiated by a client on the LAN.

All in all it's probably better to learn the firewall syntax and write your own ruleset, those checkboxes are for SOHO deployments.

By default there are no filter rules. "Protect router" installs filter rules in the input chain to filter traffic destined to the router itself. "Protect LAN" - I think - installs filters that don't let traffic from WAN to LAN through unless it was initiated by a client on the LAN.

All in all it's probably better to learn the firewall syntax and write your own ruleset, those checkboxes are for SOHO deployments.

Ok,
Thanks fewi.