diff options
| author | Mark McLoughlin <markmc@redhat.com> | 2011-09-03 14:32:35 +0100 |
|---|---|---|
| committer | Mark McLoughlin <markmc@redhat.com> | 2011-09-03 14:32:35 +0100 |
| commit | 0bcfe0b990fb8df799df2c2bb95f324beeccc974 (patch) | |
| tree | 8b499a21dfc9fe1f34a90fa48115d75c6e85be0e /bin | |
| parent | 78a63bcad5f29c8927151556229271668b0f9e2b (diff) | |
| download | nova-0bcfe0b990fb8df799df2c2bb95f324beeccc974.tar.gz nova-0bcfe0b990fb8df799df2c2bb95f324beeccc974.tar.xz nova-0bcfe0b990fb8df799df2c2bb95f324beeccc974.zip | |
Add iptables filter rules for dnsmasq
On Fedora, the default policy for the INPUT chain in the filter table
is DROP. This means that DHCP and DNS request packets from the guest
get dropped.
Add these rules to allow the traffic through:
$> sudo iptables -t filter -A nova-network-INPUT -i br0 -p udp -m udp --dport 67 -j ACCEPT
$> sudo iptables -t filter -A nova-network-INPUT -i br0 -p tcp -m tcp --dport 67 -j ACCEPT
$> sudo iptables -t filter -A nova-network-INPUT -i br0 -p udp -m udp --dport 53 -j ACCEPT
$> sudo iptables -t filter -A nova-network-INPUT -i br0 -p tcp -m tcp --dport 53 -j ACCEPT
Diffstat (limited to 'bin')
0 files changed, 0 insertions, 0 deletions