mirror of
https://github.com/apache/cloudstack.git
synced 2025-10-26 08:42:29 +01:00
4bc8686513
Part 1
This backport contained:
commit 52317c718c25111c2535657139b541db0c9d1e1f
bug 9154: Initial check in for enabling redundant virtual router
commit 54199112055d754371bfb141168fb5538bf6d6ea
Add host verification for CheckRouterCommand
commit cef978a228c90056ead9be10cbc4de74c2b8de76
Fix CheckRouterAnswer's isMaster report
commit 4072f0a6991ac3b63601a1764fbe14188965f62f
Some build fixes and code refactoring for redundant router
commit 4d3350b7cd8ee2706a9bace4437fc194e36c8dd5
Redundant Router: Fix OVS
commit 6a228830e7c46d819fa0c3317e159e041337e887
Fix findByNetwork()/findByNetworkAndPod()'s return
commit c627777b3d5bdbcd60db4032cebd349a5b1ecd83
Redundant Router: Fix isVmAlive()
commit e1275d2514adc41f8744f5107d4069c38be195f1
Only issue CheckRouterCommand to redundant routers
And all modification to the scripts till
commit 4e3942462ed3fde3a3d7011e95839e2128fba514
logging changes
in the master branch.
27 lines
966 B
Plaintext
27 lines
966 B
Plaintext
*nat
|
|
:PREROUTING ACCEPT [0:0]
|
|
:POSTROUTING ACCEPT [0:0]
|
|
:OUTPUT ACCEPT [0:0]
|
|
COMMIT
|
|
*filter
|
|
:INPUT DROP [0:0]
|
|
:FORWARD DROP [0:0]
|
|
:OUTPUT ACCEPT [0:0]
|
|
-A INPUT -d 224.0.0.18/32 -j ACCEPT
|
|
-A INPUT -d 225.0.0.50/32 -j ACCEPT
|
|
-A INPUT -i eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
|
|
-A INPUT -i eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT
|
|
-A INPUT -i eth2 -m state --state RELATED,ESTABLISHED -j ACCEPT
|
|
-A INPUT -p icmp -j ACCEPT
|
|
-A INPUT -i lo -j ACCEPT
|
|
-A INPUT -i eth0 -p udp -m udp --dport 67 -j ACCEPT
|
|
-A INPUT -i eth0 -p udp -m udp --dport 53 -j ACCEPT
|
|
-A INPUT -i eth1 -p tcp -m state --state NEW --dport 3922 -j ACCEPT
|
|
-A INPUT -i eth0 -p tcp -m state --state NEW --dport 8080 -j ACCEPT
|
|
-A INPUT -i eth0 -p tcp -m state --state NEW --dport 80 -j ACCEPT
|
|
-A FORWARD -i eth0 -o eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT
|
|
-A FORWARD -i eth0 -o eth2 -j ACCEPT
|
|
-A FORWARD -i eth2 -o eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
|
|
COMMIT
|
|
|