Changing Default iptable Rules Created by Libvirt

Virtual Machines KVM forum
1

Hi,

I was wondering if there was any way to change the default iptable rules created by libvirt when it start up. The line I’m interested in changing is as follows:

-A FORWARD -d 192.168.122.0/24 -o virbr0 -m state --state RELATED,ESTABLISHED -j ACCEPT

I want to change it to:

-A FORWARD -d 192.168.122.0/24 -o virbr0 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT

The reason for this change is that without allow NEW connections, PREROUTING and DNATing to internal KVM guests doesn’t work. Thanks.