Displaying 6 results from an estimated 6 matches for "forward_in_zones".
2017 May 28
1
Ovirt Hosted-Engine VM iptables
Hi
I would like to add rules into the iptables of the Hosted Engine VM in
Ovirt.
the version is oVirt Engine Version: 4.1.1.8-1.el7.centos
I have tried using the normal process for iptables (iptables-save etc),
but it seems that the file
/etc/sysconfig/iptables
this is ignored in the Ovirt Engine VM.
How can I add permanent rules into the Engine VM?
Kind regards
Andrew
2019 Jan 15
0
Cannot access other computers on LAN
...rot opt in out source
destination
0 0 ACCEPT all -- * * 0.0.0.0/0
0.0.0.0/0 ctstate RELATED,ESTABLISHED
0 0 ACCEPT all -- lo * 0.0.0.0/0
0.0.0.0/0
0 0 FORWARD_direct all -- * * 0.0.0.0/0
0.0.0.0/0
0 0 FORWARD_IN_ZONES_SOURCE all -- * * 0.0.0.0/0
0.0.0.0/0
0 0 FORWARD_IN_ZONES all -- * * 0.0.0.0/0
0.0.0.0/0
0 0 FORWARD_OUT_ZONES_SOURCE all -- * * 0.0.0.0/0
0.0.0.0/0
0 0 FORWARD_OUT_ZONES all -- * * 0.0.0.0/0
0.0.0.0/0...
2019 Jan 15
2
Cannot access other computers on LAN
Hello Julien,
Am Tue, 15 Jan 2019 09:30:23 +0100
schrieb Julien dupont <marcelvierzon at gmail.com>:
> In that case I see:
> IP 172.16.0.3 > 192.168.1.1: ICMP echo request, id2135, seq1, length 64
> IP 172.16.0.3 > 192.168.1.1: ICMP echo request, id2135, seq2, length 64
> IP 172.16.0.3 > 192.168.1.1: ICMP echo request, id2135, seq3, length 64
>
> Packet goes
2019 Feb 05
0
Back to c7 and firewalld
...ll-cmd --reload, it tells me error, that FORWARD is a built-in.
Now, today, what I've been looking at is to run iptables-save, and what I
see is this (in part):
-A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i lo -j ACCEPT
-A FORWARD -j FORWARD_direct
-A FORWARD -j FORWARD_IN_ZONES_SOURCE
-A FORWARD -j FORWARD_IN_ZONES
-A FORWARD -j FORWARD_OUT_ZONES_SOURCE
-A FORWARD -j FORWARD_OUT_ZONES
-A FORWARD -m conntrack --ctstate INVALID -j DROP
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
Does this mean that, instead of the format of the entry of the rule being
firewall-...
2017 Jun 20
2
guest A from virbr0 can talk to guest B in virbr1 but not vice versa
...reject-with icmp-port-unreachable
0 0 ACCEPT all -- * * 0.0.0.0/0
0.0.0.0/0 ctstate RELATED,ESTABLISHED
0 0 ACCEPT all -- lo * 0.0.0.0/0
0.0.0.0/0
0 0 FORWARD_direct all -- * * 0.0.0.0/0
0.0.0.0/0
0 0 FORWARD_IN_ZONES_SOURCE all -- * * 0.0.0.0/0
0.0.0.0/0
0 0 FORWARD_IN_ZONES all -- * * 0.0.0.0/0
0.0.0.0/0
0 0 FORWARD_OUT_ZONES_SOURCE all -- * * 0.0.0.0/0
0.0.0.0/0
0 0 FORWARD_OUT_ZONES all -- * * 0.0.0.0/0
0.0.0.0/0...
2017 Jun 20
0
Re: guest A from virbr0 can talk to guest B in virbr1 but not vice versa
...rt-unreachable
> 0 0 ACCEPT all -- * * 0.0.0.0/0
>0.0.0.0/0 ctstate RELATED,ESTABLISHED
> 0 0 ACCEPT all -- lo * 0.0.0.0/0
>0.0.0.0/0
> 0 0 FORWARD_direct all -- * * 0.0.0.0/0
>0.0.0.0/0
> 0 0 FORWARD_IN_ZONES_SOURCE all -- * * 0.0.0.0/0
> 0.0.0.0/0
> 0 0 FORWARD_IN_ZONES all -- * * 0.0.0.0/0
>0.0.0.0/0
> 0 0 FORWARD_OUT_ZONES_SOURCE all -- * * 0.0.0.0/0
> 0.0.0.0/0
> 0 0 FORWARD_OUT_ZONES all -- * *...