800917b5a2
- Update to Xen 4.1.2_rc2 c/s 23152 - bnc#716695 - domUs using tap devices will not start updated multi-xvdp.patch - Upstream patches from Jan 23803-intel-pmu-models.patch 23800-x86_64-guest-addr-range.patch 23795-intel-ich10-quirk.patch 23804-x86-IPI-counts.patch - bnc#706106 - Inconsistent reporting of VM names during migration xend-migration-domname-fix.patch - bnc#712823 - L3:Xen guest does not start reliable when rebooted xend-vcpu-affinity-fix.patch OBS-URL: https://build.opensuse.org/package/show/Virtualization/xen?expand=0&rev=143
23 lines
698 B
Diff
23 lines
698 B
Diff
Open SuSEfirewall2 FORWARD rule when use xen nat
|
|
|
|
Index: xen-4.1.2-testing/tools/hotplug/Linux/network-nat
|
|
===================================================================
|
|
--- xen-4.1.2-testing.orig/tools/hotplug/Linux/network-nat
|
|
+++ xen-4.1.2-testing/tools/hotplug/Linux/network-nat
|
|
@@ -83,6 +83,7 @@ function dhcp_stop()
|
|
op_start() {
|
|
echo 1 >/proc/sys/net/ipv4/ip_forward
|
|
iptables -t nat -A POSTROUTING -o ${netdev} -j MASQUERADE
|
|
+ iptables -P FORWARD ACCEPT
|
|
[ "$dhcp" != 'no' ] && dhcp_start
|
|
}
|
|
|
|
@@ -90,6 +91,7 @@ op_start() {
|
|
op_stop() {
|
|
[ "$dhcp" != 'no' ] && dhcp_stop
|
|
iptables -t nat -D POSTROUTING -o ${netdev} -j MASQUERADE
|
|
+ iptables -P FORWARD DROP
|
|
}
|
|
|
|
|