openstack/openstack-ansible-lxc_hosts
Code Issues Proposed changes

Merge "Remove the checksum fills"

Browse Source
This commit is contained in:
Zuul 2018-08-16 04:53:37 +00:00 committed by Gerrit Code Review
commit 137852188c
1 changed files with 0 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
templates/lxc-system-manage.j2
View File

@ -66,17 +66,6 @@ function remove_rules {
-d "${LXC_NETWORK}" \
-j MASQUERADE || true
# Remove rules from the mangle POSTROUTING chain
iptables ${USE_IPTABLES_LOCK} -t mangle \
-D POSTROUTING \
-s "${LXC_NETWORK}" \
-o "${LXC_BRIDGE}" \
-p udp \
-m udp \
--dport 68 \
-j CHECKSUM \
--checksum-fill
if [ "$LXC_IPV6_NAT" = "true" ]; then
ip6tables ${USE_IPTABLES_LOCK} -t nat -D POSTROUTING -s ${LXC_IPV6_NETWORK} ! -d ${LXC_IPV6_NETWORK} -j MASQUERADE
fi
@ -118,16 +107,6 @@ function add_rules {
-d "${LXC_NETWORK}" \
-j MASQUERADE
# Add rules to the mangle POSTROUTING chain
iptables ${USE_IPTABLES_LOCK} -t mangle \
-A POSTROUTING \
-s "${LXC_NETWORK}" \
-o "${LXC_BRIDGE}" \
-p udp \
-m udp \
--dport 68 \
-j CHECKSUM \
--checksum-fill
success "LXC IPtables rules created."
}