Revision 78b81e14 contrib/ganeti-hooks/kvm-vif-bridge
| b/contrib/ganeti-hooks/kvm-vif-bridge | ||
|---|---|---|
| 59 | 59 |
esac |
| 60 | 60 |
done |
| 61 | 61 |
|
| 62 |
iptables -D FORWARD -o $INTERFACE -j $chain 2>/dev/null |
|
| 63 |
ip6tables -D FORWARD -o $INTERFACE -j $chain 2>/dev/null |
|
| 62 |
# Flush any old rules. We have to consider all chains, since |
|
| 63 |
# we are not sure the instance was on the same chain, or had the same |
|
| 64 |
# tap interface. |
|
| 65 |
for oldchain in protected unprotected limited; do |
|
| 66 |
iptables -D FORWARD -o $INTERFACE -j $oldchain 2>/dev/null |
|
| 67 |
ip6tables -D FORWARD -o $INTERFACE -j $oldchain 2>/dev/null |
|
| 68 |
done |
|
| 69 |
|
|
| 64 | 70 |
if [ "x$chain" != "x" ]; then |
| 65 | 71 |
iptables -A FORWARD -o $INTERFACE -j $chain |
| 66 | 72 |
ip6tables -A FORWARD -o $INTERFACE -j $chain |
Also available in: Unified diff