# FX30S: wget fails unless delete iptables rules

**URL:** <https://forum.legato.io/t/fx30s-wget-fails-unless-delete-iptables-rules/3866>\
**Category:** Legato Linux distribution (Yocto project)\
**Created:** [November 8, 2018, 7:52pm UTC](https://forum.legato.io/t/fx30s-wget-fails-unless-delete-iptables-rules/3866 "2018-11-08T19:52:08Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![mjbutsch](https://avatars.discourse-cdn.com/v4/letter/m/779978/32.png) [@mjbutsch](https://forum.legato.io/u/mjbutsch)\
**Post date:** [November 8, 2018, 7:52pm UTC](https://forum.legato.io/t/fx30s-wget-fails-unless-delete-iptables-rules/3866/1 "2018-11-08T19:52:08Z")

</div>

Hello,

I am unable to get a wget to succeed unless I delete the default iptables rules that are deployed as part of the image for the FX30S.

Is this how it is supposed to be? Doesn’t seem real useful if you can’t communicate out and get a response back.

What modifications to the rules are needed to make this work without just deleting the rules?

Thank you,  
Mark

---

<div class="post-metadata">

**Author:** ![cchenry](https://avatars.discourse-cdn.com/v4/letter/c/a183cd/32.png) [@cchenry](https://forum.legato.io/u/cchenry)\
**Post date:** [November 13, 2018, 1:02am UTC](https://forum.legato.io/t/fx30s-wget-fails-unless-delete-iptables-rules/3866/2 "2018-11-13T01:02:51Z")

</div>

Hi Mark,  
This is by design. The FX30 and FX30S is purposefully shipped with the firewall highly secure. Every customer’s needs are different, so you will need to add specific firewall rules to suit your custom needs.

You’ll need a rule like this:  
iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT

But you’ll need to ensure you add it before the rmnet\_data0 DROP rule. The rules are located at: /etc/iptables.rules

BR,  
Chris