I'm working with Rpi and I want my application to modify the firewall rules on RDK-B router, I have following question could you please clarify to understand better.

1. Does RDK-B stack allow user application to manipulate firewall rules using iptables?
2. Does RDK-B have a ccsp layer to manage firewall routes?
3. I have try to create new Chain on NAT table from my user application, after some time the Chain get removed automatically? does RDK-B enforce firewall rules or user application running on RDKB can also modify the firewall rules?