[libvirt-users] Best practice for custom iptables rules

ZeroUno zerozerounouno at gmail.com
Mon Jan 13 09:21:11 UTC 2014


Il 13/01/14 04:06, Gao Yongwei ha scritto:

> how about this daemon hook script?
>
> #!/bin/bash
> #
> insert_rule() {
>      sleep 2
>      iptables -t nat -D CUSTOM_RULE
>      iptables -t nat -I CUSTOM_RULE
> }
[...]

Thanks, I already tried inserting a delay with "sleep" but it didn't 
change anything, as the hook script is not processed in parallel with 
other operations: libvirt waits until the hook script has been 
completed, before proceeding with the creation of its own iptables rules.

-- 
01




More information about the libvirt-users mailing list