openstack
/
openstack-virtual-baremetal
Code Issues Proposed changes

Add more necessary firewall rules to ovb-instack 

Apparently the undercloud firewall configuration changed and no
longer works without explicit accept rules for the public network.
This commit is contained in:
Ben Nemec 2018-12-13 21:27:36 +00:00
parent a36b6b722f
commit a52aa22125
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
bin/ovb-instack
View File

@ -82,6 +82,8 @@ network_config:
EOF_CAT
sudo os-net-config -c /tmp/eth2.cfg -v
sudo iptables -A POSTROUTING -s 10.0.0.0/24 ! -d 10.0.0.0/24 -j MASQUERADE -t nat
sudo iptables -I FORWARD -s 10.0.0.0/24 -j ACCEPT
sudo iptables -I FORWARD -d 10.0.0.0/24 -j ACCEPT
timer 'undercloud install'
timer