TIPS Firewall - Where to put new iptables rules?

[JohnTX]

I need to whitelist a set of IP addresses and ports for a new trunk (Twilio Elastic SIP). Where's the best place to put the iptables rules so they won't be overwritten?

 

[dallas]

Need a lot more information about your hardware, software and OS to be able to assist you.

 

[wardmundy]

If you're using Incredible PBX, the answer is /usr/local/sbin/iptables-custom.

If it's the FreePBX Distro, post your question on their forum.

If it's a roll-your-own IPtables setup, it depends on the distro. For RedHat, CentOS, and Rocky, it's /etc/sysconfig/iptables or ip6tables. For Debian, Ubuntu, and Raspbian, it's /etc/iptables/rules.v4 or rules.v6. Be very careful not to ever put FQDNs into these roll-your-own locations. If an FQDN fails (e.g. server is down), then IPtables gets blown out of the water. You won't have that to worry about with the Incredible PBX platform because we load rules individually, and one failure won't bring down the whole house of cards.

 

[ostridge]

depends on the distro

Nailed ward , it - this is wanting to be a FAQ.