From ae4bd0fb70874637020292d570b422113b2f694a Mon Sep 17 00:00:00 2001
From: edison <edison@cloud.com>
Date: Mon, 20 Dec 2010 16:54:09 -0800
Subject: [PATCH] fix a security group bug: restart mgt server or reconnect
 xenserver will destroy existing security group, then you can't ping user vm
 any more

---
 scripts/vm/hypervisor/xenserver/vmops | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/vm/hypervisor/xenserver/vmops b/scripts/vm/hypervisor/xenserver/vmops
index 8f976ba53d2..ca34457ac93 100755
--- a/scripts/vm/hypervisor/xenserver/vmops
+++ b/scripts/vm/hypervisor/xenserver/vmops
@@ -856,7 +856,7 @@ def cleanup_rules():
   try:
     session = get_xapi_session()
 
-    chainscmd = "iptables-save | grep '^:' | awk '{print $1}' | cut -d':' -f2"
+    chainscmd = "iptables-save | grep '^:' | grep -v '.*-def' | awk '{print $1}' | cut -d':' -f2"
     chains = util.pread2(['/bin/bash', '-c', chainscmd]).split('\n')
     cleaned = 0
     cleanup = []