We would have to start distributing a copy of mar-tools with the browser profile to do this, and then a little change to i2pbrowser.bat and i2pbrowser.sh to this effect: #World's worst pseudo-code... if(certutil checks if cert is trusted in profile); then echo "print some feedback to say X key is already trusted? Display Fingerprint?" sleep for a second or two, give them time to read else echo "adding router console SSL certificate to Browser Profile, Display Fingerprint" certutil adds...

To add a rule there is a command called add , and remove to remove a rule by its number. To see all rules and theirs numbers type print command. Next I will give you set of rules for input and forward chains for IPv4 and IPv6. Those are very basic rules that allows already established connections in, allows ping our router from the Internet, and drops any other traffic that comes from anywhere else but not our LAN.