Seecurrent iptables (not ok for engine): https://docs.google.com/file/d/0BwoPbcrMv8mvTmR6bThxTTJOdVU/edit iptables at engine-setup time (ok):https://docs.google.com/file/d/0BwoPbcrMv8mvaEprOFB1Z3JoMzg/edit