possible to edit the system generated fw rules?

[Guest]

[ara]

Hi,

is it possible to edit the automatically created Firewall Rules, especially for system access?
They are way too open for my taste. I would like to limit SSH/web interface access to the FW to specific IPs, disallow DNS etc.

How can I do this?

Thanks,
Ara

[StephanSch]

Look at /etc/firewall/input/

DNS: dnsmasq.conf.tmpl
SSH: ssh.conf.tmpl
Web interface: apache.conf

[ara]

thanks for your answer.
I haven't tried it yet (maybe never will), as I'm looking for endian alternatives now because of other shortcoming of endian in the OpenVPN and Update sector.