delete the default iptable rule

edisonSu · edisonSu · commit 66fe12910cc7 · 2011-08-03T13:39:52.000-07:00
diff --git a/python/lib/cloudutils/serviceConfig.py b/python/lib/cloudutils/serviceConfig.py
@@ -533,6 +533,8 @@ def __init__(self, syscfg):
         self.ports = "22 16509 5900:6100 49152:49216".split()
         if syscfg.env.distribution.getVersion() == "CentOS":
             self.rules = ["-D FORWARD -j RH-Firewall-1-INPUT"]
+        else:
+            self.rules = ["-D FORWARD -j REJECT --reject-with icmp-host-prohibited"]
 
 
 class cloudAgentConfig(serviceCfgBase):
