it appears xs 6.0 allows iptables rules across the bridge without csp

This commit is contained in:
Chiradeep Vittal 2012-02-13 15:53:34 -08:00
parent 8ce6fcd34d
commit 3a3d096a5c

View File

@ -395,8 +395,10 @@ def egress_chain_name(vm_name):
def can_bridge_firewall(session, args):
try:
util.pread2(['ebtables', '-V'])
util.pread2(['ipset', '-V'])
except:
return 'false'
host_uuid = args.get('host_uuid')
try:
util.pread2(['iptables', '-N', 'BRIDGE-FIREWALL'])