mirror of
https://github.com/xen-project/xen.git
synced 2026-10-28 02:01:24 +01:00
tools/hotplug/Linux: supply --physdev-is-bridged in iptables runes
With newer (pvops) kernels logs get flooded with this iptables warning: physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore Using the --physdev-is-bridged option prevents this. See also: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=571634#10 Signed-off-by: Sander Eikelenboom <linux@eikelenboom.it> Signed-off-by: Ian Jackson <ian.jackson@eu.citrix.com>
This commit is contained in:
1 parent
57f1362319
commit
adee1dd918
1 file changed
+2
-2
@@ -105,10 +105,10 @@ frob_iptable()
|
||||
local c="-D"
|
||||
fi
|
||||
|
||||
iptables "$c" FORWARD -m physdev --physdev-in "$vif" "$@" -j ACCEPT \
|
||||
iptables "$c" FORWARD -m physdev --physdev-is-bridged --physdev-in "$vif" "$@" -j ACCEPT \
|
||||
2>/dev/null &&
|
||||
iptables "$c" FORWARD -m state --state RELATED,ESTABLISHED -m physdev \
|
||||
--physdev-out "$vif" -j ACCEPT 2>/dev/null
|
||||
--physdev-is-bridged --physdev-out "$vif" -j ACCEPT 2>/dev/null
|
||||
|
||||
if [ "$command" == "online" -a $? -ne 0 ]
|
||||
then
|
||||
|
||||