how to add/remove rules in filter_rules

I want to block a ip from accessing wan, only lan

I used from GUI: Firewall => Network services filter

I added two rules( as seen in /tmp/filter_rules) that work

-A FORWARD -i br0 -o eth0 -p udp -s 192.168.1.99 -j DROP
-A FORWARD -i br0 -o eth0 -p tcp -s 192.168.1.99 -j DROP

However I want to be able to somewhat easy turn these on and off.
My thinking was to run a script via ssh to do this.


I guess those lines above with "iptables" in front of them are what adds
the...

how to add/remove rules in filter_rules