Just wanted to post here saying THANK YOU! Your config was a great starting point when setting up my new ERL with CenturyLink Prism TV service.
One thing I noticed was that you listed 67.12.0.0/15 and 151.118.0.0/16 as possible sources for CenturyLink multicast UDP packets, but I was not able to get anything but the local channels to work. I added a rule before these to allow all packets *to* 224.0.0.0/4 through, and log each one. From channel surfing and watching the log I was able to find that my channels came from 67.12.0.0/15 and 69.179.0.0/16, so this is what I've allowed through instead of 151.118.0.0/16. Hope this helps someone else!