From b889fdab387d0f8502be3d0b64fc8430e04e71e9 Mon Sep 17 00:00:00 2001 From: Naredula Janardhana Reddy Date: Wed, 25 Jan 2012 15:01:42 +0530 Subject: [PATCH] Bug 12808: Merge issues: alter the sequence, due to the failure of CHECKSUM ip rule, the other rule(CONNMARK) getting not executed. Fix : altered the sequence. --- patches/systemvm/debian/config/etc/iptables/iptables-router | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/patches/systemvm/debian/config/etc/iptables/iptables-router b/patches/systemvm/debian/config/etc/iptables/iptables-router index 50377df2db3..ed0688c6e4f 100644 --- a/patches/systemvm/debian/config/etc/iptables/iptables-router +++ b/patches/systemvm/debian/config/etc/iptables/iptables-router @@ -29,6 +29,8 @@ COMMIT :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] --A POSTROUTING -p udp --dport bootpc -j CHECKSUM --checksum-fill -A PREROUTING -m state --state ESTABLISHED,RELATED -j CONNMARK --restore-mark COMMIT +*mangle +-A POSTROUTING -p udp --dport bootpc -j CHECKSUM --checksum-fill +COMMIT