summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGene Czarcinski <gene@czarc.net>2012-10-30 17:18:34 -0400
committerEric Blake <eblake@redhat.com>2012-10-30 16:04:25 -0600
commitadaa7ab653b0f841aa549e9f47f9e63ee1d15b37 (patch)
treee654eb969418d75d1ac02348191c7f58f4afd372
parent270a9fef375d3eabeec1c2fabe71c4c26d13803f (diff)
downloadlibvirt-1.0.0-rc3.tar.gz
bugfix: ip6tables rule removalv1.0.0-rc3
Three FORWARD chain rules are added and two INPUT chain rules are added when a network is started but only the FORWARD chain rules are removed when the network is destroyed.
-rw-r--r--src/network/bridge_driver.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/src/network/bridge_driver.c b/src/network/bridge_driver.c
index f814f6f257..3dbf00987a 100644
--- a/src/network/bridge_driver.c
+++ b/src/network/bridge_driver.c
@@ -1578,6 +1578,8 @@ networkRemoveGeneralIp6tablesRules(struct network_driver *driver,
if (!virNetworkDefGetIpByIndex(network->def, AF_INET6, 0))
return;
+ iptablesRemoveUdpInput(driver->iptables, AF_INET6, network->def->bridge, 53);
+ iptablesRemoveTcpInput(driver->iptables, AF_INET6, network->def->bridge, 53);
iptablesRemoveForwardAllowCross(driver->iptables, AF_INET6, network->def->bridge);
iptablesRemoveForwardRejectIn(driver->iptables, AF_INET6, network->def->bridge);
iptablesRemoveForwardRejectOut(driver->iptables, AF_INET6, network->def->bridge);