Bug 1044280 - my ssh port is 10809 in iptables, but after installation, changed to port 22 in iptables
Summary: my ssh port is 10809 in iptables, but after installation, changed to port 22 ...
Keywords:
Status: CLOSED EOL
Alias: None
Product: oVirt
Classification: Retired
Component: ovirt-engine-installer
Version: 4.0
Hardware: x86_64
OS: Linux
unspecified
medium
Target Milestone: ---
: ---
Assignee: Alon Bar-Lev
QA Contact:
URL:
Whiteboard: infra
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-12-18 02:35 UTC by kronus
Modified: 2016-09-13 00:56 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2014-01-05 21:51:12 UTC
oVirt Team: Virt


Attachments (Terms of Use)

Description kronus 2013-12-18 02:35:49 UTC
Description of problem:

ssh port: 10809
iptables rules: 
-A INPUT -p tcp -m state --state NEW -m tcp --dport 10809 -j ACCEPT

but after installation of ovirt, it modified iptables:
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT

so I can't ssh into this machine...

Version-Release number of selected component (if applicable):


How reproducible:
before modify the iptables, please read the real one, not empty all the iptables and write the default.

Steps to Reproduce:
1.write rules in iptables: -A INPUT -p tcp -m state --state NEW -m tcp --dport 10809 -j ACCEPT
2.run engine-setup, and confirm write firewall rules
3. after installation, cat /etc/sysconfig/iptables
4. -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT

Actual results:
 -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT


Expected results:
-A INPUT -p tcp -m state --state NEW -m tcp --dport 10809 -j ACCEPT

Additional info:

Comment 1 Itamar Heim 2013-12-18 08:55:05 UTC
well, the checkbox does say 'override firewall rules'...

I think this was fixed in:
commit c93c7e4bd7ea58cbe3af435c95871a061b57822c
Author: Alon Bar-Lev <alonbl>
Date:   Mon Oct 14 23:39:03 2013 +0300

    host-deploy: configure ssh port per port used to actual communications
    
    Bug-Url: https://bugzilla.redhat.com/show_bug.cgi?id=1018948
    Change-Id: I1b581f81ad3f11b22eb20b72d34a41fae47f18bc
    Signed-off-by: Alon Bar-Lev <alonbl>

Comment 2 Alon Bar-Lev 2013-12-18 10:08:18 UTC
What version of product do you use? 4.0 is not valid...

Comment 3 Alon Bar-Lev 2014-01-05 21:51:12 UTC
Hi,
Please reopen if you have more information.
Thanks!


Note You need to log in before you can comment on or make changes to this bug.