disable iptables filter on bridge

Signed-off-by: Derumier Alexandre <aderumier@odiso.com>

diff --git a/debian/rules b/debian/rules
index a999d9b5ae431f5f0f9d9797cec37959d5879198..a433c17d5c5909bb1393c9866d1c409fa53aa7c7 100755 (executable)
--- a/debian/rules
+++ b/debian/rules
@@ -26,6 +26,7 @@ override_dh_install:
        # we do not install this, because we don't want to break
        # existing tools which parse syslog entries
        #install -m 0644 -D debian/pve-rsyslog.conf debian/pve-cluster/etc/rsyslog.d/pve-rsyslog.conf
+       install -m 0644 -D debian/sysctl.conf debian/pve-cluster/etc/sysctl.d/pve.conf
 
 override_dh_installinit:
 

diff --git a/debian/sysctl.conf b/debian/sysctl.conf
new file mode 100644 (file)
index 0000000..59bfce5
--- /dev/null
+++ b/debian/sysctl.conf
@@ -0,0 +1,4 @@
+net.bridge.bridge-nf-call-ip6tables = 0
+net.bridge.bridge-nf-call-iptables = 0
+net.bridge.bridge-nf-call-arptables = 0
+net.bridge.bridge-nf-filter-vlan-tagged = 0