Vertica does not recommend using firewalls between nodes. A database cluster should depend on an external firewall provided by a gateway, not Linux. For optimal performance, the host in the cluster machines must work together as though they were a single powerful machine. Firewalls prevent this from happening.
If you must use firewalls, open the following ports on each.
Vertica
5433 TCP (All connections)
Spread
4803 TCP (Client connections)
4803 UDP (Daemon <-> Daemon)
4804 UDP (Daemon <-> Daemon)
4805 UDP (Monitor to Daemon) (optional and only if "DangerousMonitor = yes" in config file)