I've made a commit to master that should be added to 4.1, please: b1e61cc94a6a4e3cf89a5fc345b54bfa36c6d4ec
The section "Firewall Rules" seems to have been deleted when the new "Egress Firewall Rules" section was added for CLOUDSTACK-1028. The first section is about ingress rules, so I'm pretty sure we still need it. These are sub-sections of the larger section "IP Forwarding and Firewalling". In addition, the intro paragraph of "IP Forwarding and Firewalling" wasn't updated when "Egress Firewall Rules" was added, and it contained a statement that contradicts the new egress default policy (blocked). Thanks, Jessica T.