Skip to content

Commit 77fb01c

Browse files
committed
Address commments
1 parent 2fa9d88 commit 77fb01c

File tree

1 file changed

+5
-2
lines changed

1 file changed

+5
-2
lines changed

systemvm/debian/opt/cloud/bin/cs/CsAddress.py

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -565,8 +565,11 @@ def fw_vpcrouter(self):
565565
self.fw.append(["mangle", "",
566566
"-A PREROUTING -m state --state NEW -i %s -s %s ! -d %s/32 -j ACL_OUTBOUND_%s" %
567567
(self.dev, static_route['network'], static_route['ip_address'], self.dev)])
568-
self.fw.append(["filter", "", "-A FORWARD -d %s -o %s -j ACL_INBOUND_%s" %
569-
(static_route['network'], self.dev, self.dev)])
568+
self.fw.append(["filter", "front", "-A FORWARD -d %s -o %s -j ACL_INBOUND_%s" %
569+
(static_route['network'], self.dev, self.dev)])
570+
self.fw.append(["filter", "front",
571+
"-A FORWARD -d %s -o %s -m state --state RELATED,ESTABLISHED -j ACCEPT" %
572+
(static_route['network'], self.dev)])
570573

571574
if self.address["source_nat"]:
572575
self.fw.append(["nat", "front",

0 commit comments

Comments
 (0)