Create firewall.custom

this is in openwrt as   /etc/init.d/firewall.custom
Activated from web interface
It will run immediately - not delayed = danger of lockup
(i cannot use iptables  -m physdev  neither  -m iprange)