From 33f4f952cf0cbec83c6f2195bd8e94d628215040 Mon Sep 17 00:00:00 2001 From: Jayapal Date: Mon, 7 Sep 2015 16:01:57 +0530 Subject: [PATCH] CLOUDSTACK-8690: Updated the iptables order --- systemvm/patches/debian/config/opt/cloud/bin/configure.py | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/systemvm/patches/debian/config/opt/cloud/bin/configure.py b/systemvm/patches/debian/config/opt/cloud/bin/configure.py index fa66f939c35..49dbb9c5ac4 100755 --- a/systemvm/patches/debian/config/opt/cloud/bin/configure.py +++ b/systemvm/patches/debian/config/opt/cloud/bin/configure.py @@ -644,10 +644,10 @@ class CsRemoteAccessVpn(CsDataBag): return self.fw.append(["mangle", "","-N VPN_%s " %publicip]) - self.fw.append(["mangle", "","-I PREROUTING -d %s -j VPN_%s " % (publicip, publicip)]) - self.fw.append(["mangle", "","-A VPN_%s -p ah -j ACCEPT " % publicip]) - self.fw.append(["mangle", "","-A VPN_%s -p esp -j ACCEPT " % publicip]) self.fw.append(["mangle", "","-A VPN_%s -j RETURN " % publicip]) + self.fw.append(["mangle", "","-I VPN_%s -p ah -j ACCEPT " % publicip]) + self.fw.append(["mangle", "","-I VPN_%s -p esp -j ACCEPT " % publicip]) + self.fw.append(["mangle", "","-I PREROUTING -d %s -j VPN_%s " % (publicip, publicip)]) class CsForwardingRules(CsDataBag):