diff options
| author | Jenkins <jenkins@review.openstack.org> | 2012-03-30 17:15:57 +0000 |
|---|---|---|
| committer | Gerrit Code Review <review@openstack.org> | 2012-03-30 17:15:57 +0000 |
| commit | 741c2e32ce0f34b8128d1b4234fed8b02a4940af (patch) | |
| tree | 54292ff1584a70bbf05d905cd7d2c2001e223bb6 | |
| parent | ad4e65a6688fceecac3f44f9d8eb46e35b6ed6d8 (diff) | |
| parent | b302e41785920a910013b07b40c0384b2294172c (diff) | |
Merge "Acccept metadata ip so packets aren't snatted"
| -rwxr-xr-x | nova/network/linux_net.py | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/nova/network/linux_net.py b/nova/network/linux_net.py index 2c81f71f0..a1054bbd0 100755 --- a/nova/network/linux_net.py +++ b/nova/network/linux_net.py @@ -442,6 +442,10 @@ def init_host(ip_range=None): add_snat_rule(ip_range) iptables_manager.ipv4['nat'].add_rule('POSTROUTING', + '-s %s -d %s/32 -j ACCEPT' % + (ip_range, FLAGS.metadata_host)) + + iptables_manager.ipv4['nat'].add_rule('POSTROUTING', '-s %s -d %s -j ACCEPT' % (ip_range, FLAGS.dmz_cidr)) |