<![CDATA[Cloudron overrides iptables-persistent]]>Hi all

I need to have a few extra ports open on my home theater computer, which has cloudron installed as the "brain" for web-apps (nextcloud).

(So far I could not detect any conflict between cloudron and the other extra serverapps that is in need of these ekstra open ports (Virtualbox and its VM's))

I have added these ekstra ports in iptables and saved the configuration with iptables-persistent

But when server/cloudron is restarted, cloudron overrides my iptables-persistent settings and clean out my extra iptablerules.

How can I get cloudron to respect my extra iptables rules, and not wipe them every reboot/restart?

]]>https://forum.cloudron.io/topic/1780/cloudron-overrides-iptables-persistentRSS for NodeWed, 10 Jun 2026 18:55:00 GMTThu, 23 May 2019 12:45:52 GMT60<![CDATA[Reply to Cloudron overrides iptables-persistent on Mon, 18 Apr 2022 10:51:18 GMT]]>@niko was there any error restarting cloudron-firewall service or such? This should still work as expected, so maybe you hit a bug somewhere?

Also could you share your ports.json config here so we can try to reproduce this? If you don't want to expose your port settings here, you can also send them to support@cloudron.io

]]>https://forum.cloudron.io/post/46290https://forum.cloudron.io/post/46290Mon, 18 Apr 2022 10:51:18 GMT<![CDATA[Reply to Cloudron overrides iptables-persistent on Sun, 17 Apr 2022 20:42:07 GMT]]>@girish
i have followed this guide but it didn't work for me so i had to manually add ports to iptables in the end.

i used to to this editing the ports.json file before and it worked as expected.

]]>https://forum.cloudron.io/post/46276https://forum.cloudron.io/post/46276Sun, 17 Apr 2022 20:42:07 GMT<![CDATA[Reply to Cloudron overrides iptables-persistent on Sat, 17 Oct 2020 12:17:51 GMT]]>@girish Great, everything worked as expected.

]]>https://forum.cloudron.io/post/16220https://forum.cloudron.io/post/16220Sat, 17 Oct 2020 12:17:51 GMT<![CDATA[Reply to Cloudron overrides iptables-persistent on Fri, 16 Oct 2020 18:40:44 GMT]]>@necrevistonnezr yes

]]>https://forum.cloudron.io/post/16182https://forum.cloudron.io/post/16182Fri, 16 Oct 2020 18:40:44 GMT<![CDATA[Reply to Cloudron overrides iptables-persistent on Fri, 16 Oct 2020 18:33:39 GMT]]>So can we delete /etc/iptables/rules.v4 and /etc/iptables/rules.v6?

]]>https://forum.cloudron.io/post/16181https://forum.cloudron.io/post/16181Fri, 16 Oct 2020 18:33:39 GMT<![CDATA[Reply to Cloudron overrides iptables-persistent on Fri, 16 Oct 2020 16:59:09 GMT]]>It's better to use Cloudron's built-in IP block list and port white list. I think maybe iptables persistent probably still works OK but we don't really test it actively.

]]>https://forum.cloudron.io/post/16170https://forum.cloudron.io/post/16170Fri, 16 Oct 2020 16:59:09 GMT<![CDATA[Reply to Cloudron overrides iptables-persistent on Fri, 16 Oct 2020 10:11:31 GMT]]>Now that we can whitelist ports (even though it might not work as expected?), does it interfere with iptables-persistent? Should one remove the package and / or entries in /etc/iptables/rules.v4 or /etc/iptables/rules.v6?

]]>https://forum.cloudron.io/post/16153https://forum.cloudron.io/post/16153Fri, 16 Oct 2020 10:11:31 GMT<![CDATA[Reply to Cloudron overrides iptables-persistent on Sat, 25 May 2019 00:16:57 GMT]]>@stoccafisso https://cloudron.io/documentation/security/#block-ips has the necessary commands to make iptable changes persist.

]]>https://forum.cloudron.io/post/3598https://forum.cloudron.io/post/3598Sat, 25 May 2019 00:16:57 GMT<![CDATA[Reply to Cloudron overrides iptables-persistent on Thu, 23 May 2019 20:51:39 GMT]]>@nebulon said in Cloudron overrides iptables-persistent:

iptables-save >/etc/iptables/rules.v4

Thanks @nebulon , that may be the problem, as I initially only ran the command

iptables-save

instead of

iptables-save >/etc/iptables/rules.v4

(I followed this guide: https://linuxconfig.org/how-to-make-iptables-rules-persistent-after-reboot-on-linux)

Now the iptables rules (inkl custom rules) persist after reboot, but then again...cloudron has had no reason to do changes.

So I provoked it by installing another app (wordpress-app). A few seconds after installation it said wordpress was running, but I could not access it. A few seconds later I could. So it seems it is working. (Maybe I should have tried another app, with other ports)

@necrevistonnezr maybe you could also benefit from looking at iptables-persistent? https://linuxconfig.org/how-to-make-iptables-rules-persistent-after-reboot-on-linux

]]>https://forum.cloudron.io/post/3589https://forum.cloudron.io/post/3589Thu, 23 May 2019 20:51:39 GMT<![CDATA[Reply to Cloudron overrides iptables-persistent on Thu, 23 May 2019 20:09:46 GMT]]>You might have forgotten to dump the changed iptables configuration with:

iptables-save >/etc/iptables/rules.v4
]]>https://forum.cloudron.io/post/3587https://forum.cloudron.io/post/3587Thu, 23 May 2019 20:09:46 GMT<![CDATA[Reply to Cloudron overrides iptables-persistent on Thu, 23 May 2019 16:15:22 GMT]]>@stoccafisso
I run Plex on the same server as Cloudron (there's no official Plex app yet for Cloudron, although it's planned.)
I set up a script via cron that opens the necessary ports every XX minutes.

iptables -I INPUT -p tcp -m tcp --dport 32400 -j ACCEPT
iptables -I INPUT -p tcp -m tcp --dport 32469 -j ACCEPT
]]>https://forum.cloudron.io/post/3584https://forum.cloudron.io/post/3584Thu, 23 May 2019 16:15:22 GMT<![CDATA[Reply to Cloudron overrides iptables-persistent on Thu, 23 May 2019 15:11:01 GMT]]>I came to think about something like this:

  1. Run a script that monitors when cloudron is finished loading, and finished configuring iptables (after each restart/bootup)
  2. Then, when cloudron is complete restarted, script insert the needed custom iptables entries, and then run iptables-persistent.

There are probably much better ways to do it, but at least I am trying to think out a possible solution. But how to code that script and get it to do the stuff I want? Anyone able to help?

]]>https://forum.cloudron.io/post/3583https://forum.cloudron.io/post/3583Thu, 23 May 2019 15:11:01 GMT<![CDATA[Reply to Cloudron overrides iptables-persistent on Thu, 23 May 2019 13:52:57 GMT]]>@stoccafisso Cloudron manages iptables on it's own. I am not sure of a proper way around this other than forking the app you use for media and modifying the CloudronManifest.json file to include the ports you need.

Though that's not really recommended. @nebulon might have some answers though!

]]>https://forum.cloudron.io/post/3582https://forum.cloudron.io/post/3582Thu, 23 May 2019 13:52:57 GMT