Revert "Ensure FORWARD is ACCEPT by default"
This reverts commit da31c6e5ba.
This change didn't actually solve the problem so it's best
not to continue to carry it. The correct fix is for the issue
is https://review.openstack.org/547281.
Change-Id: I4b9b4119cb5d07f74d203350611e83fa85c521da
This commit is contained in:
@@ -899,19 +899,6 @@ nova::notify_on_state_change: 'vm_state'
|
||||
|
||||
# Firewall
|
||||
tripleo::firewall::manage_firewall: true
|
||||
# Docker switches FORWARD to DROP by default which causes issues on the
|
||||
# undercloud. We are already included a REJECT rule in so switch these back
|
||||
# to ACCEPT.
|
||||
# https://bugs.launchpad.net/tripleo/+bug/1750194
|
||||
tripleo::firewall::firewall_chains:
|
||||
'FORWARD:filter:IPv4':
|
||||
ensure: present
|
||||
policy: accept
|
||||
purge: false
|
||||
'FORWARD:filter:IPv6':
|
||||
ensure: present
|
||||
policy: accept
|
||||
purge: false
|
||||
tripleo::firewall::firewall_rules:
|
||||
'105 ntp':
|
||||
dport: 123
|
||||
|
||||
Reference in New Issue
Block a user