mirror of https://github.com/apache/cloudstack.git
- Allow forwarding on all public interfaces. Regression in 4.6 restricted only to 4.6.
+ for traffic originating from eth0 and outbound on any public interface forward to FW_OUTBOUND chain
+ for traffic on reverse path from eth0 and on any public interface use RELATED,ESTABLISHED to allow the traffic
- for each public interface, traffic originatig from the interace be marked with device number. On reverse path
corresponding 'ip rules' table will be looked for routing decision
|
||
|---|---|---|
| .. | ||
| debian | ||