Return-Path: X-Original-To: apmail-incubator-cloudstack-dev-archive@minotaur.apache.org Delivered-To: apmail-incubator-cloudstack-dev-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 7A5FE9059 for ; Thu, 10 May 2012 03:14:25 +0000 (UTC) Received: (qmail 99670 invoked by uid 500); 10 May 2012 03:14:25 -0000 Delivered-To: apmail-incubator-cloudstack-dev-archive@incubator.apache.org Received: (qmail 99614 invoked by uid 500); 10 May 2012 03:14:25 -0000 Mailing-List: contact cloudstack-dev-help@incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: cloudstack-dev@incubator.apache.org Delivered-To: mailing list cloudstack-dev@incubator.apache.org Received: (qmail 99602 invoked by uid 99); 10 May 2012 03:14:25 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 10 May 2012 03:14:25 +0000 X-ASF-Spam-Status: No, hits=-0.7 required=5.0 tests=RCVD_IN_DNSWL_LOW,SPF_HELO_PASS,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of Alex.Huang@citrix.com designates 66.165.176.63 as permitted sender) Received: from [66.165.176.63] (HELO SMTP02.CITRIX.COM) (66.165.176.63) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 10 May 2012 03:14:17 +0000 X-IronPort-AV: E=Sophos;i="4.75,561,1330923600"; d="scan'208";a="194188153" Received: from sjcpmailmx02.citrite.net ([10.216.14.75]) by FTLPIPO02.CITRIX.COM with ESMTP/TLS/RC4-MD5; 09 May 2012 23:13:55 -0400 Received: from SJCPMAILBOX01.citrite.net ([10.216.4.73]) by SJCPMAILMX02.citrite.net ([10.216.14.75]) with mapi; Wed, 9 May 2012 20:13:55 -0700 From: Alex Huang To: "cloudstack-dev@incubator.apache.org" Date: Wed, 9 May 2012 20:13:49 -0700 Subject: RE: domr iptables rules Thread-Topic: domr iptables rules Thread-Index: Ac0uBhb3wHtf7iOwS/OM0CkJ9B0EYwAElALgAAisxqAAB/B1oA== Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 I believe it is possible. However, it would be a zone wide change and you'= ll have to change the domr template. --Alex > -----Original Message----- > From: Clayton Weise [mailto:cweise@iswest.net] > Sent: Wednesday, May 09, 2012 4:26 PM > To: 'cloudstack-dev@incubator.apache.org' > Subject: RE: domr iptables rules >=20 > As a dirty hack would it be possible to create an init script which added= these > custom rules when the domr boots? >=20 > -----Original Message----- > From: Anthony Xu [mailto:Xuefei.Xu@citrix.com] > Sent: Wednesday, May 09, 2012 12:21 PM > To: cloudstack-dev@incubator.apache.org > Subject: RE: domr iptables rules >=20 > Iptables rules is not persistent inside domr, CloudStack send command to > domr to generate rules on demand. > So if you reboot domr, some rules may not come back. But if you reboot > domr through Cloudstack UI, all rules should come back, Cloudstack will s= end > commands to program rules again. >=20 >=20 > Anthony >=20 >=20 > > -----Original Message----- > > From: Clayton Weise [mailto:cweise@iswest.net] > > Sent: Wednesday, May 09, 2012 10:09 AM > > To: 'cloudstack-dev@incubator.apache.org' > > Subject: domr iptables rules > > > > Where are these kept? After rebooting a virtual router not all of the > > firewall rules came back. Also, I wanted to manually add a few things > > and I was curious where I could do it and have those rules retained > > when the domr reboots. > > > > Thanks