Attachment 706772 Details for Bug 919181 – FORWARD rules

FORWARD rules

file_919181.txt (text/plain), 2.76 KB, created by Ofer Blaut on 2013-03-07 19:26:24 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Ofer Blaut

Created: 2013-03-07 19:26:24 UTC

Size: 2.76 KB

patch

obsolete

>Quantum FORWARD rules
>################################### 
>[root@puma34 ~]# iptables  -L FORWARD -n -v
>Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
> pkts bytes target     prot opt in     out     source               destination         
>36241 3850K nova-filter-top  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
>34447 3384K nova-compute-FORWARD  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
>33570 3094K quantum-filter-top  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
>33570 3094K quantum-l3-agent-FORWARD  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
>33570 3094K nova-api-FORWARD  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
>33570 3094K nova-network-FORWARD  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
>    0     0 ACCEPT     all  --  *      virbr0  0.0.0.0/0            192.168.122.0/24    state RELATED,ESTABLISHED 
>    0     0 ACCEPT     all  --  virbr0 *       192.168.122.0/24     0.0.0.0/0           
>    0     0 ACCEPT     all  --  virbr0 virbr0  0.0.0.0/0            0.0.0.0/0           
>    0     0 REJECT     all  --  *      virbr0  0.0.0.0/0            0.0.0.0/0           reject-with icmp-port-unreachable 
>    0     0 REJECT     all  --  virbr0 *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-port-unreachable 
>33570 3094K REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited 
>
>
>
>NOVA network rules
>###########################
>
>
>[root@puma04 ~(keystone_admin)]$ iptables  -L FORWARD -n -v
>Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
> pkts bytes target     prot opt in     out     source               destination         
>  112 12400 nova-filter-top  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
>  112 12400 nova-compute-FORWARD  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
>    0     0 nova-network-FORWARD  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
>    0     0 nova-api-FORWARD  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
>    0     0 ACCEPT     all  --  *      virbr0  0.0.0.0/0            192.168.122.0/24    state RELATED,ESTABLISHED 
>    0     0 ACCEPT     all  --  virbr0 *       192.168.122.0/24     0.0.0.0/0           
>    0     0 ACCEPT     all  --  virbr0 virbr0  0.0.0.0/0            0.0.0.0/0           
>    0     0 REJECT     all  --  *      virbr0  0.0.0.0/0            0.0.0.0/0           reject-with icmp-port-unreachable 
>    0     0 REJECT     all  --  virbr0 *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-port-unreachable 
>    0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited

Actions: View

Attachments on bug 919181: 706772 | 737177