From 44e893812010961baa8edda7ffb1f96239c3c542 Mon Sep 17 00:00:00 2001 From: Anthony Xu Date: Fri, 21 Sep 2012 10:24:58 -0700 Subject: [PATCH] CLOUDSTACK-106: this issue seems be coverred by other issue somehow, when other issue is fixed, this issue shows up --- patches/systemvm/debian/config/opt/cloud/bin/vpc_guestnw.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/patches/systemvm/debian/config/opt/cloud/bin/vpc_guestnw.sh b/patches/systemvm/debian/config/opt/cloud/bin/vpc_guestnw.sh index 7331c53ea67..590b58e5784 100755 --- a/patches/systemvm/debian/config/opt/cloud/bin/vpc_guestnw.sh +++ b/patches/systemvm/debian/config/opt/cloud/bin/vpc_guestnw.sh @@ -48,7 +48,7 @@ destroy_acl_chain() { create_acl_chain() { destroy_acl_chain sudo iptables -t mangle -N ACL_OUTBOUND_$dev 2>/dev/null - sudo iptables -t mangle -A ACL_OUTBOUND_$dev -j DROP 2>/dev/null + sudo iptables -t mangle -A ACL_OUTBOUND_$dev -j ACCEPT 2>/dev/null sudo iptables -t mangle -A PREROUTING -m state --state NEW -i $dev -s $subnet/$mask ! -d $ip -j ACL_OUTBOUND_$dev 2>/dev/null sudo iptables -N ACL_INBOUND_$dev 2>/dev/null # drop if no rules match (this will be the last rule in the chain)