<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Arial,Helvetica,sans-serif;" dir="ltr">
<p>Hello,</p>
<p><br>
</p>
<p>I am trying to understand how libvirt firewall rules are loaded as I have firewalld and iptables services are disabled.</p>
<p><br>
</p>
<p>Where is the configuration files for firewall and NAT rules for libvirt?</p>
<p>How can I load default firewall rules if I mess things up</p>
<p><br>
</p>
<p>Also I have realized that followings is default </p>
<p><br>
</p>
<p><span>ACCEPT all -- 0.0.0.0/0 192.168.122.0/24 ctstate RELATED,ESTABLISHED</span></p>
<p><span><br>
</span></p>
<p><span>but If I am to forward a port for a real IP to internal guest machine I need
</span></p>
<p><span><br>
</span></p>
<p><span><span>ACCEPT all -- 0.0.0.0/0 192.168.122.0/24 state NEW,RELATED,ESTABLISHED</span></span></p>
<p><span><br>
</span></p>
<p><span>(NEW state is required) and also of course a forwarding rule</span></p>
<p><span><br>
</span></p>
<p><span><span>iptables -t nat -I PREROUTING -p tcp --dport 3389 -j DNAT --to-destination 192.168.122.16:3389</span></span></p>
<p><span><br>
</span></p>
<p><span>Is there a place I can make this rules static with LibVirt (not playing with firewalld and/or iptables service for Centos 7)</span></p>
<p><span><br>
</span></p>
<p><span>Regards.</span></p>
<p><br>
</p>
</div>
</body>
</html>