Custom Firewall Rules

This section describes how to modify custom firewall rules.

To modify local firewall rules, edit the following file: /etc/iptables/rules.v4

Important: Add only targeted rules for addresses and ports. Do not add blanket drop or accept rules. SD-WAN Gateway will append its own rules to the table and, because the rules are evaluated in order, that may prevent Gateway software from functioning properly.

*filter
:INPUT ACCEPT [0:0]
-A INPUT -p udp -m udp --source 127.0.0.1 --dport 161 -m comment --comment "allow SNMP port" -j ACCEPT 
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
COMMIT

Restart netfilter service:

service netfilter-persistent restart
service vc_process_monitor restart