From 11398e2bdbf456bab10424a564555248c7976e7f Mon Sep 17 00:00:00 2001 From: John Hua Date: Thu, 28 Apr 2016 10:45:28 +0800 Subject: [PATCH] Accept all packets from HIMN In MOS 8.0, compute node will drop packets at input stage thus the packets forwarded from HIMN will not get a chance to be masqueraded which will happen at postrouting stage. It is the reason why Dom0 fails to connect to Cinder's iScSi target. This change will make sure all packets flown from HIMN will be accepted to prevent similar situations from happening. Change-Id: Icd427ba1e133a55204af6b5a8ad203b73f5f5ad6 (cherry picked from commit 1a148cde1d23790322775d2d3db8c76df4076eec) --- deployment_scripts/compute_post_deployment.py | 1 + 1 file changed, 1 insertion(+) diff --git a/deployment_scripts/compute_post_deployment.py b/deployment_scripts/compute_post_deployment.py index f290f63..b47577f 100755 --- a/deployment_scripts/compute_post_deployment.py +++ b/deployment_scripts/compute_post_deployment.py @@ -271,6 +271,7 @@ def forward_from_himn(eth): '-i', eth, '-o', endpoint_name, '-j', 'ACCEPT') + execute('iptables', '-A', 'INPUT', '-i', eth, '-j', 'ACCEPT') execute('iptables', '-t', 'filter', '-S', 'FORWARD') execute('iptables', '-t', 'nat', '-S', 'POSTROUTING') execute('service', 'iptables-persistent', 'save')