From fa9b43c10c9cbd3458e26ae24fc8ce0397f23e04 Mon Sep 17 00:00:00 2001 From: anthony Date: Fri, 31 Aug 2012 21:03:47 -0700 Subject: [PATCH] CS-16260: open 80, 8080 port for domr reviewed-by: kelven --- patches/systemvm/debian/config/etc/init.d/cloud-early-config | 3 --- patches/systemvm/debian/config/etc/iptables/iptables-router | 2 ++ 2 files changed, 2 insertions(+), 3 deletions(-) diff --git a/patches/systemvm/debian/config/etc/init.d/cloud-early-config b/patches/systemvm/debian/config/etc/init.d/cloud-early-config index 207655a9133..fb439ec0462 100755 --- a/patches/systemvm/debian/config/etc/init.d/cloud-early-config +++ b/patches/systemvm/debian/config/etc/init.d/cloud-early-config @@ -540,9 +540,6 @@ setup_router() { fi fi - sudo iptables -A INPUT -i eth0 -p tcp -m state --state NEW --dport 8080 -j ACCEPT - sudo iptables -A INPUT -i eth0 -p tcp -m state --state NEW --dport 80 -j ACCEPT - setup_dnsmasq NS=$NS1 diff --git a/patches/systemvm/debian/config/etc/iptables/iptables-router b/patches/systemvm/debian/config/etc/iptables/iptables-router index 5cecbf9a4ee..e1972e3a12d 100644 --- a/patches/systemvm/debian/config/etc/iptables/iptables-router +++ b/patches/systemvm/debian/config/etc/iptables/iptables-router @@ -17,6 +17,8 @@ COMMIT -A INPUT -i eth0 -p udp -m udp --dport 67 -j ACCEPT -A INPUT -i eth0 -p udp -m udp --dport 53 -j ACCEPT -A INPUT -i eth1 -p tcp -m state --state NEW --dport 3922 -j ACCEPT +-A INPUT -i eth0 -p tcp -m state --state NEW --dport 8080 -j ACCEPT +-A INPUT -i eth0 -p tcp -m state --state NEW --dport 80 -j ACCEPT -A FORWARD -i eth0 -o eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT -A FORWARD -i eth0 -o eth2 -j ACCEPT -A FORWARD -i eth2 -o eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT