I have a router with openwrt. I want to temporarily cut all transit traffic without changing the router's configuration. I do this:iptables -I FORWARD -j DROP New connections cannot be established now. But existing connections (even ping) continue to work.  How can I make iptables stop existing connections?
iptables -I FORWARD -j DROP does not cut existing connections
iptables;openwrt
specific versions of OpenWRT have a performance optimization enabled. This turns it off:sysctl -w net.netfilter.nf_conntrack_skip_filter=0http://wiki.openwrt.org/doc/uci/firewall#nf_conntrack_skip_filter