diff --git a/scripts/route_patch/firewall.diff b/scripts/route_patch/firewall.diff
new file mode 100755
index 0000000..f4a8c92
--- /dev/null
+++ b/scripts/route_patch/firewall.diff
@@ -0,0 +1,12 @@
+diff --git a/package/network/config/firewall/files/firewall.config b/package/network/config/firewall/files/firewall.config
+index 081b5dedb..25db8edf5 100755
+--- a/package/network/config/firewall/files/firewall.config
++++ b/package/network/config/firewall/files/firewall.config
+@@ -3,6 +3,7 @@ config defaults
+ 	option input		ACCEPT
+ 	option output		ACCEPT
+ 	option forward		REJECT
++	option enabled		'0'
+ # Uncomment this line to disable ipv6 rules
+ #	option disable_ipv6	1
+