Comment 4 for bug 1715395

Thank you very much for the patch. I made a quick hack and can confirm that your fix is working. Firewalls now get attached and work properly in case of distributed routers.

Unfortunaetly, when you remove a firewall from a router or update some of its rules when the firewall is ACTIVE, e.g. change "DENY" -> "ALLOW", the modification has no effect. It seems that the iptables rules are not removed and updated, respectively. The log does not contain any error entries.

Can you please check this?