Hello community, here is the log from the commit of package libvirt for openSUSE:Factory checked in at 2013-03-25 20:37:47 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libvirt (Old) and /work/SRC/openSUSE:Factory/.libvirt.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libvirt", Maintainer is "[email protected]" Changes: -------- --- /work/SRC/openSUSE:Factory/libvirt/libvirt.changes 2013-03-17 10:13:35.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.libvirt.new/libvirt.changes 2013-03-25 20:40:38.000000000 +0100 @@ -1,0 +2,6 @@ +Sun Mar 24 20:05:28 UTC 2013 - [email protected] + +- add libvirt-iptables-1.4.18.diff, fix masquerading with iptables + v1.4.18 (--state match is deprectated, use conntrack instead) + +------------------------------------------------------------------- New: ---- libvirt-iptables-1.4.18.diff ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libvirt.spec ++++++ --- /var/tmp/diff_new_pack.1EYJyz/_old 2013-03-25 20:40:41.000000000 +0100 +++ /var/tmp/diff_new_pack.1EYJyz/_new 2013-03-25 20:40:41.000000000 +0100 @@ -422,6 +422,7 @@ Patch100: xen-name-for-devid.patch Patch101: clone.patch Patch102: xen-pv-cdrom.patch +Patch103: libvirt-iptables-1.4.18.diff # Our patches Patch200: libvirtd-defaults.patch Patch201: libvirtd-init-script.patch @@ -562,6 +563,7 @@ %patch100 -p1 %patch101 %patch102 -p1 +%patch103 -p1 %patch200 -p1 %patch201 -p1 %patch202 -p1 ++++++ libvirt-iptables-1.4.18.diff ++++++ Index: b/src/util/viriptables.c =================================================================== --- a/src/util/viriptables.c +++ b/src/util/viriptables.c @@ -478,22 +478,22 @@ iptablesForwardAllowRelatedIn(iptablesCo VIR_SOCKET_ADDR_FAMILY(netaddr), action, "--destination", networkstr, "--in-interface", physdev, "--out-interface", iface, - "--match", "state", - "--state", "ESTABLISHED,RELATED", + "--match", "conntrack", + "--ctstate", "ESTABLISHED,RELATED", "--jump", "ACCEPT", NULL); } else { ret = iptablesAddRemoveRule(ctx->forward_filter, VIR_SOCKET_ADDR_FAMILY(netaddr), action, "--destination", networkstr, "--out-interface", iface, - "--match", "state", - "--state", "ESTABLISHED,RELATED", + "--match", "conntrack", + "--ctstate", "ESTABLISHED,RELATED", "--jump", "ACCEPT", NULL); } VIR_FREE(networkstr); return ret; -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
