|
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [Xen-changelog] [xen master] hotplug/linux: Fix the vif script to handle_iptable for tap interfaces
commit b08834a20e482be4771b5120b58b7dfee675e67b
Author: Sylvain Munaut <s.munaut@xxxxxxxxxxxxxxxxxxxx>
AuthorDate: Tue May 20 16:56:43 2014 +0200
Commit: Ian Campbell <ian.campbell@xxxxxxxxxx>
CommitDate: Wed May 21 14:02:27 2014 +0100
hotplug/linux: Fix the vif script to handle_iptable for tap interfaces
The TAP interfaces need the same iptables rules as the VIF, without it,
traffic will not be forwarded to/from them is the default FORWARD policy
is DROP/REJECT
Signed-off-by: Sylvain Munaut <s.munaut@xxxxxxxxxxxxxxxxxxxx>
Acked-by: Ian Campbell <ian.campbell@xxxxxxxxxx>
---
tools/hotplug/Linux/vif-bridge | 4 +---
tools/hotplug/Linux/vif-common.sh | 4 ++--
2 files changed, 3 insertions(+), 5 deletions(-)
diff --git a/tools/hotplug/Linux/vif-bridge b/tools/hotplug/Linux/vif-bridge
index b7dcbd6..df44789 100644
--- a/tools/hotplug/Linux/vif-bridge
+++ b/tools/hotplug/Linux/vif-bridge
@@ -97,9 +97,7 @@ case "$command" in
;;
esac
-if [ "$type_if" = vif ]; then
- handle_iptable
-fi
+handle_iptable
call_hooks vif post
diff --git a/tools/hotplug/Linux/vif-common.sh
b/tools/hotplug/Linux/vif-common.sh
index 73ee241..28ddae5 100644
--- a/tools/hotplug/Linux/vif-common.sh
+++ b/tools/hotplug/Linux/vif-common.sh
@@ -123,7 +123,7 @@ ip=$(xenstore_read_default "$XENBUS_PATH/ip" "$ip")
frob_iptable()
{
- if [ "$command" == "online" ]
+ if [ "$command" == "online" -o "$command" == "add" ]
then
local c="-I"
else
@@ -135,7 +135,7 @@ frob_iptable()
iptables "$c" FORWARD -m physdev --physdev-is-bridged --physdev-out "$dev" \
-j ACCEPT 2>/dev/null
- if [ "$command" == "online" -a $? -ne 0 ]
+ if [ \( "$command" == "online" -o "$command" == "add" \) -a $? -ne 0 ]
then
log err "iptables setup failed. This may affect guest networking."
fi
--
generated by git-patchbot for /home/xen/git/xen.git#master
_______________________________________________
Xen-changelog mailing list
Xen-changelog@xxxxxxxxxxxxx
http://lists.xensource.com/xen-changelog
|
![]() |
Lists.xenproject.org is hosted with RackSpace, monitoring our |