From c3cc4c18354a2c4c90cd01ea413a22fe03d6a35d Mon Sep 17 00:00:00 2001 From: Gene Czarcinski Date: Tue, 30 Oct 2012 17:18:34 -0400 Subject: [PATCH] bugfix: ip6tables rule removal Three FORWARD chain rules are added and two INPUT chain rules are added when a network is started but only the FORWARD chain rules are removed when the network is destroyed. (cherry picked from commit adaa7ab653b0f841aa549e9f47f9e63ee1d15b37) --- src/network/bridge_driver.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/network/bridge_driver.c b/src/network/bridge_driver.c index 8b270af6b6..7c39363518 100644 --- a/src/network/bridge_driver.c +++ b/src/network/bridge_driver.c @@ -1627,6 +1627,8 @@ networkRemoveGeneralIp6tablesRules(struct network_driver *driver, if (!virNetworkDefGetIpByIndex(network->def, AF_INET6, 0)) return; + iptablesRemoveUdpInput(driver->iptables, AF_INET6, network->def->bridge, 53); + iptablesRemoveTcpInput(driver->iptables, AF_INET6, network->def->bridge, 53); iptablesRemoveForwardAllowCross(driver->iptables, AF_INET6, network->def->bridge); iptablesRemoveForwardRejectIn(driver->iptables, AF_INET6, network->def->bridge); iptablesRemoveForwardRejectOut(driver->iptables, AF_INET6, network->def->bridge);