In order to configure custom iptables rules, you may edit the /usr/share/perl5/EBox/Iptables.pm at line 375 in sub start and code like the next example:
# pf is the sub to call iptables command
# "<stuff>" is the iptables arguments
pf "-A ftoexternalonly -j fdrop";
Hope this helps.