From 065eeb61416c17a20ee3776f0cacdbf621d7b075 Mon Sep 17 00:00:00 2001 From: anthony Date: Wed, 11 Jul 2012 16:03:42 -0700 Subject: [PATCH] VPC : remove rules in nat table if ip is removed --- patches/systemvm/debian/config/opt/cloud/bin/vpc_func.sh | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/patches/systemvm/debian/config/opt/cloud/bin/vpc_func.sh b/patches/systemvm/debian/config/opt/cloud/bin/vpc_func.sh index 6d20ecaa89a..18cbf4efd1b 100755 --- a/patches/systemvm/debian/config/opt/cloud/bin/vpc_func.sh +++ b/patches/systemvm/debian/config/opt/cloud/bin/vpc_func.sh @@ -51,6 +51,11 @@ removeRulesForIp() { rule=$(echo $rule | sed 's/\-A/\-D/') sudo iptables -t mangle $rule done + iptables-save -t nat | grep $ip | grep "\-A" | while read rule + do + rule=$(echo $rule | sed 's/\-A/\-D/') + sudo iptables -t nat $rule + done iptables-save -t filter | grep $ip | grep "\-A" | while read rule do rule=$(echo $rule | sed 's/\-A/\-D/')