CLOUDSTACK-8905: Fixed hooking egress rules
Project: http://git-wip-us.apache.org/repos/asf/cloudstack/repo Commit: http://git-wip-us.apache.org/repos/asf/cloudstack/commit/2bf7fb4b Tree: http://git-wip-us.apache.org/repos/asf/cloudstack/tree/2bf7fb4b Diff: http://git-wip-us.apache.org/repos/asf/cloudstack/diff/2bf7fb4b Branch: refs/heads/master Commit: 2bf7fb4b63932d80f641462073c751f07ab0c3ea Parents: 13b29ba Author: Jayapal <[email protected]> Authored: Thu Sep 24 17:06:11 2015 +0530 Committer: Jayapal <[email protected]> Committed: Thu Sep 24 17:06:11 2015 +0530 ---------------------------------------------------------------------- systemvm/patches/debian/config/opt/cloud/bin/configure.py | 1 + 1 file changed, 1 insertion(+) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/cloudstack/blob/2bf7fb4b/systemvm/patches/debian/config/opt/cloud/bin/configure.py ---------------------------------------------------------------------- diff --git a/systemvm/patches/debian/config/opt/cloud/bin/configure.py b/systemvm/patches/debian/config/opt/cloud/bin/configure.py index 49dbb9c..54d6c17 100755 --- a/systemvm/patches/debian/config/opt/cloud/bin/configure.py +++ b/systemvm/patches/debian/config/opt/cloud/bin/configure.py @@ -124,6 +124,7 @@ class CsAcl(CsDataBag): " -m %s " % rule['protocol'] + " --dport %s -j RETURN" % rnge]) if self.direction == 'egress': + self.fw.append(["filter", "", " -A FW_OUTBOUND -j FIREWALL_EGRESS_RULES"]) if rule['protocol'] == "icmp": self.fw.append(["filter", "front", " -A FIREWALL_EGRESS_RULES" +
