External/libvirt
1
0
Fork 0
mirror of https://gitlab.com/libvirt/libvirt.git synced 2024-07-16 22:57:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

Tweak masquering rules to only capture traffic leaving the virtual network

Browse Source
This commit is contained in:
Daniel P. Berrange 2008-03-28 01:05:08 +00:00
parent c5adab5270
commit b7909d3276
2 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
ChangeLog
View File

@ -1,3 +1,9 @@
Thu Mar 27 20:59:56 EDT 2008 Daniel P. Berrange <berrange@redhat.com>
* src/iptables.c: Ensure masquering rule only catches traffic
leaving the virtual network, and not traffic inside it
(patch from Charles Duffy)
Thu Mar 27 14:36:56 CET 2008 Jim Meyering <meyering@redhat.com>
lxcError: mark a string and add to the list of nearly-checked functions

2
src/iptables.c
View File

@ -1032,6 +1032,7 @@ iptablesForwardMasquerade(iptablesContext *ctx,
return iptablesAddRemoveRule(ctx->nat_postrouting,
action,
"--source", network,
"--destination", "!", network,
"--out-interface", physdev,
"--jump", "MASQUERADE",
NULL);
@ -1039,6 +1040,7 @@ iptablesForwardMasquerade(iptablesContext *ctx,
return iptablesAddRemoveRule(ctx->nat_postrouting,
action,
"--source", network,
"--destination", "!", network,
"--jump", "MASQUERADE",
NULL);
}