Bug 846970

Summary:	firewalld prevents communication between libvirt VMs
Product:	[Fedora] Fedora	Reporter:	Stef Walter <stefw>
Component:	firewalld	Assignee:	Thomas Woerner <twoerner>
Status:	CLOSED NEXTRELEASE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	17	CC:	jpopelka, twoerner
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2012-10-10 16:08:07 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Stef Walter 2012-08-09 10:33:42 UTC

Description of problem:

I have a libvirt setup with a virtual NAT network and multiple VMs which have NICs on that virtual network. The firewalld rules prevent TCP communication (ICMP works fine) between the VMs in that virtual network.

If I 'iptables -F' then communication is restored.

Version-Release number of selected component (if applicable):

Name        : firewalld
Arch        : noarch
Version     : 0.2.6
Release     : 1.fc18

Name        : iptables
Arch        : x86_64
Version     : 1.4.14
Release     : 3.fc18

Name        : libvirt
Arch        : x86_64
Version     : 0.9.13
Release     : 3.fc18

How reproducible:

Every time.

Steps to Reproduce:
1. Make sure you have a NAT network in virt manager.
2. Create multiple VMs using that network.
3. Try to access any TCP service from one VM to another.
  
Actual results:

Connection fails.

Expected results:

Connection succeeds.

Comment 1 Thomas Woerner 2012-10-10 16:08:07 UTC

Fixed in rawhide and F-18. libvirt now has support for firewalld.