[
https://issues.apache.org/jira/browse/CLOUDSTACK-535?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Rafael Weingärtner resolved CLOUDSTACK-535.
-------------------------------------------
Resolution: Fixed
> Virtual Router DNS is restricted to UDP only
> --------------------------------------------
>
> Key: CLOUDSTACK-535
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-535
> Project: CloudStack
> Issue Type: Bug
> Security Level: Public(Anyone can view this level - this is the
> default.)
> Components: Network Controller
> Affects Versions: 4.0.0
> Reporter: Tamas Monos
> Priority: Minor
>
> Issue:
> When a new router VM is generated and started the initial firewall rules
> allow only port 53 on UDP. Router VMs should allow port 53 on TCP is well due
> to longer resolutions can switch to TCP for example cPanel. The cPanel
> installer will not run if it cannot resolve over TCP.
> Workaround:
> Login to the router VM and execute:
> iptables -A INPUT -i eth0 -p tcp -m tcp --dport 53 -j ACCEPT
> Resolution:
> I'm not sure where the initial firewall rules are coming from (maybe systemVM
> ISO?) but there this new rule should be added.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)