Accepting request 160819 from home:seife:branches:Virtualization

add libvirt-iptables-1.4.18.diff, fix masquerading with iptables v1.4.18

OBS-URL: https://build.opensuse.org/request/show/160819
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=256
This commit is contained in:
Ismail Dönmez 2013-03-24 20:40:42 +00:00 committed by Git OBS Bridge
parent 48f970eb90
commit fe4a6bb6d8
3 changed files with 39 additions and 0 deletions

View File

@ -0,0 +1,31 @@
Index: b/src/util/viriptables.c
===================================================================
--- a/src/util/viriptables.c
+++ b/src/util/viriptables.c
@@ -478,22 +478,22 @@ iptablesForwardAllowRelatedIn(iptablesCo
VIR_SOCKET_ADDR_FAMILY(netaddr),
action,
"--destination", networkstr,
"--in-interface", physdev,
"--out-interface", iface,
- "--match", "state",
- "--state", "ESTABLISHED,RELATED",
+ "--match", "conntrack",
+ "--ctstate", "ESTABLISHED,RELATED",
"--jump", "ACCEPT",
NULL);
} else {
ret = iptablesAddRemoveRule(ctx->forward_filter,
VIR_SOCKET_ADDR_FAMILY(netaddr),
action,
"--destination", networkstr,
"--out-interface", iface,
- "--match", "state",
- "--state", "ESTABLISHED,RELATED",
+ "--match", "conntrack",
+ "--ctstate", "ESTABLISHED,RELATED",
"--jump", "ACCEPT",
NULL);
}
VIR_FREE(networkstr);
return ret;

View File

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Sun Mar 24 20:05:28 UTC 2013 - seife+obs@b1-systems.com
- add libvirt-iptables-1.4.18.diff, fix masquerading with iptables
v1.4.18 (--state match is deprectated, use conntrack instead)
-------------------------------------------------------------------
Fri Mar 8 12:00:39 MST 2013 - jfehlig@suse.com

View File

@ -422,6 +422,7 @@ Patch0: ce4557c3-apparmor-tapfd-label.patch
Patch100: xen-name-for-devid.patch
Patch101: clone.patch
Patch102: xen-pv-cdrom.patch
Patch103: libvirt-iptables-1.4.18.diff
# Our patches
Patch200: libvirtd-defaults.patch
Patch201: libvirtd-init-script.patch
@ -562,6 +563,7 @@ Authors:
%patch100 -p1
%patch101
%patch102 -p1
%patch103 -p1
%patch200 -p1
%patch201 -p1
%patch202 -p1