Qubes3.2 sys-firewall iptables rules altered upon start of appvm, deletion of previous rules

[cybe...@national.shitposting.agency]

Greetings,

I have custom iptables rules for sys-firewall that is applied during sys-firewall startup via /rw/config/rc.local

When I startup an app VM it automatically alters the sys-firewall iptables rules entirely and replaces my custom rule set with another set.

Is there a way I can preserve my custom rules upon app-vm startup?

I only have 2 or 3 custom rules on sys-firewall which allow communication between certain vm's and forwards external port 443 traffic to an app vm.

[cybe...@national.shitposting.agency]

Nevermind, I should have skimmed through the documentation first. I found /rw/config/qubes-firewall-user-script
case closed.