[Ovirt-devel] [PATCH]: Remove bogus iptables physdev iptables rule in ovirt init script

Chris Lalancette clalance at redhat.com
Tue Sep 2 08:40:54 UTC 2008

    Remove the setting up of the physdev-is-bridged rule in the ovirt init script.
    This is now being properly handled by the ovirt-host-creator %post section.
    Signed-off-by: Chris Lalancette <clalance at redhat.com>

diff --git a/ovirt-managed-node/scripts/ovirt b/ovirt-managed-node/scripts/ovirt
index ba1f20c..232da49 100644
--- a/ovirt-managed-node/scripts/ovirt
+++ b/ovirt-managed-node/scripts/ovirt
@@ -11,10 +11,6 @@
 . /etc/init.d/ovirt-functions
 start() {
-    # Regardless of how iptables is configured, we always need the physdev bridge,
-    # and it needs to be at the front of the forward chain
-    iptables -I FORWARD -m physdev --physdev-is-bridged -j ACCEPT
     # retrieve config from local oVirt partition if available

More information about the ovirt-devel mailing list