The following pull request was submitted through Github. It can be accessed and reviewed at: https://github.com/lxc/lxd/pull/4741
This e-mail was sent by the LXC bot, direct replies will not reach the author unless they happen to be subscribed to this list. === Description (from pull-request) === Closes #4739 Signed-off-by: Stéphane Graber <[email protected]>
From a2db324875c74403d8f0a37d64fb815433bd4492 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Graber?= <[email protected]> Date: Thu, 5 Jul 2018 18:47:56 -0400 Subject: [PATCH] lxd/networks: Skip DHCP mangle if firewall off MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Closes #4739 Signed-off-by: Stéphane Graber <[email protected]> --- lxd/networks.go | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/lxd/networks.go b/lxd/networks.go index 4bdc0dab1..61e7b2a74 100644 --- a/lxd/networks.go +++ b/lxd/networks.go @@ -1126,7 +1126,9 @@ func (n *network) Start() error { } // Attempt a workaround for broken DHCP clients - networkIptablesPrepend("ipv4", n.name, "mangle", "POSTROUTING", "-o", n.name, "-p", "udp", "--dport", "68", "-j", "CHECKSUM", "--checksum-fill") + if n.config["ipv4.firewall"] == "" || shared.IsTrue(n.config["ipv4.firewall"] { + networkIptablesPrepend("ipv4", n.name, "mangle", "POSTROUTING", "-o", n.name, "-p", "udp", "--dport", "68", "-j", "CHECKSUM", "--checksum-fill") + } // Allow forwarding if n.config["bridge.mode"] == "fan" || n.config["ipv4.routing"] == "" || shared.IsTrue(n.config["ipv4.routing"]) {
_______________________________________________ lxc-devel mailing list [email protected] http://lists.linuxcontainers.org/listinfo/lxc-devel
