weizhouapache commented on a change in pull request #4847:
URL: https://github.com/apache/cloudstack/pull/4847#discussion_r599824466
##########
File path: systemvm/debian/opt/cloud/bin/cs/CsApp.py
##########
@@ -61,12 +61,12 @@ def setup(self):
self.fw.append([
"", "front",
- "-A INPUT -i %s -d %s/32 -p tcp -m tcp -m state --state NEW
--dport 80 -j ACCEPT" % (self.dev, self.ip)
+ "-A INPUT -i %s -s %s/32 -p tcp -m tcp -m state --state NEW
--dport 80 -j ACCEPT" % (self.dev, self.ip)
Review comment:
@Spaceman1984
here is an example,
if VR ip is 192.168.10.1, and guest network is 192.168.10.0/24, the rule
should be `-i eth0 -s 192.168.10.0/24`, not `-i eth0 -s 192.168.10.1/32`
otherwise, the vms in guest network could not access metadata/userdata in VR.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
