[Ovirt-devel] [PATCH]: Configure iptables on the managed node

[Chris Lalancette]

One of the side-effects of the SELinux support that recently went into
livecd-tools (and is now in Fedora 9) is that it runs lokkit at the end of
installation.  This results in the default firewall being applied to the managed
node.  In general, this is a good thing, but we need to customize that firewall
to allow incoming ssh and incoming libvirt, at the very least (there may be more
in the future).  The attached patch just configures the firewall in %post, and
with this in place I can successfully ssh into the managed node and use remote
libvirt commands.

Signed-off-by: Chris Lalancette <clalance at redhat.com>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ovirt-iptables.patch
Type: text/x-patch
Size: 971 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/ovirt-devel/attachments/20080709/8f6168e3/attachment.bin>