ClearOS does not use "iptables-save". Also any commands you use at the command line get wiped when ClearOS restarts.
Are you using ClearOS with a firewall? If so and assuming ClearOS 7,x, please install the Custom Firewall module and add your rules there, changing "iptables" to "$IPTABLES". Logging goes to /var/log/messages.

I split my messages out with a configlet in /etc/rsyslog.d:

# Split out Firewall messages

if $programname == 'kernel' and $msg contains 'IN=' and $msg contains 'OUT=' then -/var/log/firewall

& stop

Note your logs will be huge so you need to remember to add a logrotate function if you split out the logging. Also you can just watch the INPUT chain and prehaps reduce it even further with:

-m state --state NEW

in your rules. You may want to miss out the "1" as that is the default when inserting rules.

What I don't understand is that ClearOS blocks unsolicited traffic anyway, unless explicitly allowed in the incoming firewall.