diff options
author | Gene Czarcinski <gene@czarc.net> | 2012-10-30 17:18:34 -0400 |
---|---|---|
committer | Eric Blake <eblake@redhat.com> | 2012-10-30 16:04:25 -0600 |
commit | adaa7ab653b0f841aa549e9f47f9e63ee1d15b37 (patch) | |
tree | e654eb969418d75d1ac02348191c7f58f4afd372 | |
parent | 270a9fef375d3eabeec1c2fabe71c4c26d13803f (diff) | |
download | libvirt-1.0.0-rc3.tar.gz |
bugfix: ip6tables rule removalv1.0.0-rc3
Three FORWARD chain rules are added and two INPUT chain rules
are added when a network is started but only the FORWARD chain
rules are removed when the network is destroyed.
-rw-r--r-- | src/network/bridge_driver.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/network/bridge_driver.c b/src/network/bridge_driver.c index f814f6f257..3dbf00987a 100644 --- a/src/network/bridge_driver.c +++ b/src/network/bridge_driver.c @@ -1578,6 +1578,8 @@ networkRemoveGeneralIp6tablesRules(struct network_driver *driver, if (!virNetworkDefGetIpByIndex(network->def, AF_INET6, 0)) return; + iptablesRemoveUdpInput(driver->iptables, AF_INET6, network->def->bridge, 53); + iptablesRemoveTcpInput(driver->iptables, AF_INET6, network->def->bridge, 53); iptablesRemoveForwardAllowCross(driver->iptables, AF_INET6, network->def->bridge); iptablesRemoveForwardRejectIn(driver->iptables, AF_INET6, network->def->bridge); iptablesRemoveForwardRejectOut(driver->iptables, AF_INET6, network->def->bridge); |