Return-Path: X-Original-To: apmail-cloudstack-dev-archive@www.apache.org Delivered-To: apmail-cloudstack-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 5F9CA17563 for ; Tue, 14 Apr 2015 19:57:03 +0000 (UTC) Received: (qmail 82927 invoked by uid 500); 14 Apr 2015 19:57:03 -0000 Delivered-To: apmail-cloudstack-dev-archive@cloudstack.apache.org Received: (qmail 82880 invoked by uid 500); 14 Apr 2015 19:57:03 -0000 Mailing-List: contact dev-help@cloudstack.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cloudstack.apache.org Delivered-To: mailing list dev@cloudstack.apache.org Received: (qmail 82859 invoked by uid 99); 14 Apr 2015 19:57:02 -0000 Received: from git1-us-west.apache.org (HELO git1-us-west.apache.org) (140.211.11.23) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 14 Apr 2015 19:57:02 +0000 Received: by git1-us-west.apache.org (ASF Mail Server at git1-us-west.apache.org, from userid 33) id AACECE040F; Tue, 14 Apr 2015 19:57:02 +0000 (UTC) From: wilderrodrigues To: dev@cloudstack.apache.org Reply-To: dev@cloudstack.apache.org References: In-Reply-To: Subject: [GitHub] cloudstack pull request: Make the routers iptables config persiste... Content-Type: text/plain Message-Id: <20150414195702.AACECE040F@git1-us-west.apache.org> Date: Tue, 14 Apr 2015 19:57:02 +0000 (UTC) Github user wilderrodrigues commented on the pull request: https://github.com/apache/cloudstack/pull/167#issuecomment-93040925 Hi Rene, I tried to get it working with iptables-persistent package but spent about 2 days and it took me nowhere. I can send an email with some details tomorrow and explain what was not working. To sum it up for now: once i save rules/filter/nat on rules.v4/v6, no route work anymore. Also, after rebooting the router with the rebook command it get in an even worse state that is only recovered if I reboot again for the management server. Perhaps our debian image is lacking something. The solution I pushed with the plain old iptables-restore works just fine. Cheers, Wilder Sent from my iPhone On 14 Apr 2015, at 21:24, René Moser > wrote: There is a Debian package for this functionality called iptables-persistent. It is implemented using a init script. The rules are expected to be in /etc/iptables/rules.v4 / /etc/iptables/rules.v6 Rules can be loaded using /etc/init.d/iptables-persistent start and saved to file by /etc/init.d/iptables-persistent save. Because of existing functionality in a Debian package (maintained, well known, supported in future Debian releases), I would like to use this package in favor of this commit. Thoughts? — Reply to this email directly or view it on GitHub. --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled and wishes so, or if the feature is enabled but not working, please contact infrastructure at infrastructure@apache.org or file a JIRA ticket with INFRA. ---