From c0440e8124666fe7c642d8875870b7c09b65ce42 Mon Sep 17 00:00:00 2001 From: Rohit Yadav Date: Thu, 8 Mar 2018 10:01:36 +0100 Subject: [PATCH] CLOUDSTACK-10317: Fix SNAT rules for additional public nics (#2476) * CLOUDSTACK-10317: Fix SNAT rules for additional public nics This allows networks with additional public nics to have correct SNAT iptables rules applied on configuration. Signed-off-by: Rohit Yadav * update based on Wei's suggested change Signed-off-by: Rohit Yadav --- systemvm/debian/opt/cloud/bin/cs/CsAddress.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/systemvm/debian/opt/cloud/bin/cs/CsAddress.py b/systemvm/debian/opt/cloud/bin/cs/CsAddress.py index 42992b55123..dbafa1df555 100755 --- a/systemvm/debian/opt/cloud/bin/cs/CsAddress.py +++ b/systemvm/debian/opt/cloud/bin/cs/CsAddress.py @@ -388,7 +388,7 @@ class CsIP: self.fw.append(["mangle", "", "-A VPN_%s -j RETURN" % self.address['public_ip']]) self.fw.append(["nat", "", - "-A POSTROUTING -o eth2 -j SNAT --to-source %s" % self.address['public_ip']]) + "-A POSTROUTING -o %s -j SNAT --to-source %s" % (self.dev, self.cl.get_eth2_ip())]) self.fw.append(["mangle", "", "-A PREROUTING -i %s -m state --state NEW " % self.dev + "-j CONNMARK --set-xmark %s/0xffffffff" % self.dnum])