weizhouapache commented on PR #13173:
URL: https://github.com/apache/cloudstack/pull/13173#issuecomment-4485290913
@agronaught
to be clear, can you test the changes below ?
```
diff --git a/systemvm/debian/opt/cloud/bin/cs/CsNetfilter.py
b/systemvm/debian/opt/cloud/bin/cs/CsNetfilter.py
index 93d0d0388ef..63d7724dd20 100755
--- a/systemvm/debian/opt/cloud/bin/cs/CsNetfilter.py
+++ b/systemvm/debian/opt/cloud/bin/cs/CsNetfilter.py
@@ -232,7 +232,7 @@ class CsNetfilters(object):
if hook == "input" or hook == "output":
CsHelper.execute("nft add rule %s %s %s icmpv6 type {
echo-request, echo-reply, \
nd-neighbor-solicit, nd-router-advert, nd-neighbor-advert }
accept" % (address_family, table, chain))
- elif hook == "forward":
+ if hook == "input" or hook == "forward":
CsHelper.execute("nft add rule %s %s %s ct state
established,related accept" % (address_family, table, chain))
def add_ip4_chain(self, address_family, table, chain, hook, action):
```
do not make other changes
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
