allow traffic from lo (PVEFW-INPUT)
authorDietmar Maurer <dietmar@proxmox.com>
Thu, 20 Feb 2014 11:39:38 +0000 (12:39 +0100)
committerDietmar Maurer <dietmar@proxmox.com>
Thu, 20 Feb 2014 11:39:38 +0000 (12:39 +0100)
PVE/Firewall.pm

index 4dd83e9..f7a87ca 100644 (file)
@@ -1114,6 +1114,10 @@ sub compile {
            generate_tap_rules_direction($ruleset, $group_rules, $iface, $netid, $macaddr, $rules->{$vmid}->{out}, $bridge, 'OUT');
        }
     }
+
+    # allow traffic from lo (ourself)
+    ruleset_addrule($ruleset, "PVEFW-INPUT", "-i lo -j ACCEPT");
+
     return $ruleset;
 }