Skip to content
This repository was archived by the owner on Jan 15, 2020. It is now read-only.

Commit 66fe129

Browse files
edisonSuedisonSu
committed
delete the default iptable rule
1 parent e3d30c6 commit 66fe129

1 file changed

Lines changed: 2 additions & 0 deletions

File tree

‎python/lib/cloudutils/serviceConfig.py‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -533,6 +533,8 @@ def __init__(self, syscfg):
533533
self.ports = "22 16509 5900:6100 49152:49216".split()
534534
if syscfg.env.distribution.getVersion() == "CentOS":
535535
self.rules = ["-D FORWARD -j RH-Firewall-1-INPUT"]
536+
else:
537+
self.rules = ["-D FORWARD -j REJECT --reject-with icmp-host-prohibited"]
536538

537539

538540
class cloudAgentConfig(serviceCfgBase):

0 commit comments

Comments
 (0)