cloudstack-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Rafael Weingärtner (JIRA) <>
Subject [jira] [Resolved] (CLOUDSTACK-535) Virtual Router DNS is restricted to UDP only
Date Fri, 17 Mar 2017 16:24:41 GMT


Rafael Weingärtner resolved CLOUDSTACK-535.
    Resolution: Fixed

> Virtual Router DNS is restricted to UDP only
> --------------------------------------------
>                 Key: CLOUDSTACK-535
>                 URL:
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the default.) 
>          Components: Network Controller
>    Affects Versions: 4.0.0
>            Reporter: Tamas Monos
>            Priority: Minor
> Issue:
> When a new router VM is generated and started the initial firewall rules allow only port
53 on UDP. Router VMs should allow port 53 on TCP is well due to longer resolutions can switch
to TCP for example cPanel. The cPanel installer will not run if it cannot resolve over TCP.
> Workaround:
> Login to the router VM and execute:
> iptables -A INPUT -i eth0 -p tcp -m tcp --dport 53 -j ACCEPT
> Resolution:
> I'm not sure where the initial firewall rules are coming from (maybe systemVM ISO?) but
there this new rule should be added.

This message was sent by Atlassian JIRA

View raw message