Alexandros Kosiaris has submitted this change and it was merged.
Change subject: ferm: Also NOTRACK in OUTPUT raw table chain
......................................................................
ferm: Also NOTRACK in OUTPUT raw table chain
We also need to not track locally generated packets as well. Add a rule
for NOTRACK the OUTPUT chain
Change-Id: Ifefd64f87747c8d5cba18709ea65b620e03fae16
---
M modules/ferm/files/functions.conf
1 file changed, 3 insertions(+), 0 deletions(-)
Approvals:
Filippo Giunchedi: Looks good to me, but someone else must approve
Alexandros Kosiaris: Looks good to me, approved
jenkins-bot: Verified
diff --git a/modules/ferm/files/functions.conf
b/modules/ferm/files/functions.conf
index aec786f..5db4478 100644
--- a/modules/ferm/files/functions.conf
+++ b/modules/ferm/files/functions.conf
@@ -18,6 +18,9 @@
chain PREROUTING {
proto $proto dport $port NOTRACK;
}
+ chain OUTPUT {
+ proto $proto sport $port NOTRACK;
+ }
}
}
}
--
To view, visit https://gerrit.wikimedia.org/r/230061
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: Ifefd64f87747c8d5cba18709ea65b620e03fae16
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Alexandros Kosiaris <[email protected]>
Gerrit-Reviewer: Alexandros Kosiaris <[email protected]>
Gerrit-Reviewer: Filippo Giunchedi <[email protected]>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
