Custom firewall rules on host

I believe I’ve answered this question: