Installation and Startup
Rev 2 Mar.18
43
41110485
·
By default, all routes on the Ethernet and cellular interfaces are disabled. To
reconfigure the firewall to allow these connections, see
Other references:
•
Download the Legato Reference Manual (PDF) from
http://source.sierrawireless.com/resources/legato/referencemanual
Reconfiguring the Firewall
To allow a response on any interface for a device-initiated request:
1.
Open the file located at
/etc/iptables.rules
.
Ignore the comment that the
/etc/iptables.rules
file is generated.
Note: Do not attempt to configure the firewall using the files
/etc/iptables/
rules.v4
and
/etc/iptables/rules.v6
. These are mangOH iptables rules that
are not supported by the FX30S.
2.
Add the following rule:
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
Note: The new rule must be added before the DROP rule, as shown below.
# Generated by iptables-save v1.4.21 on Thu Nov 10 19:02:24 2016
*filter
:INPUT ACCEPT [189:17812]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [148:22530]
-A INPUT -i rmnet0 -p icmp -m icmp --icmp-type 0 -m state --state ESTABLISHED -j ACCEPT
-A INPUT -i rmnet0 -p tcp -m tcp --sport 53 -m state --state ESTABLISHED -j ACCEPT
-A INPUT -i rmnet0 -p udp -m udp --sport 53 -m state --state ESTABLISHED -j ACCEPT
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -i rmnet0 -j DROP
-A INPUT -i eth0 -p icmp -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --sport 53 -m state --state ESTABLISHED -j ACCEPT
-A INPUT -i eth0 -p udp -m udp --sport 53 -m state --state ESTABLISHED -j ACCEPT
-A INPUT -i eth0 -j DROP
COMMIT
Completed on Thu Apr 27 19:02:24 2017
