allow traffic from lo (PVEFW-INPUT)

diff --git a/PVE/Firewall.pm b/PVE/Firewall.pm
index 4dd83e90fa76bec7ea80117bfa710606ea8e85b2..f7a87caacd37989e90ee64b508c3381d911546c0 100644 (file)
--- a/PVE/Firewall.pm
+++ b/PVE/Firewall.pm
@@ -1114,6 +1114,10 @@ sub compile {
            generate_tap_rules_direction($ruleset, $group_rules, $iface, $netid, $macaddr, $rules->{$vmid}->{out}, $bridge, 'OUT');
        }
     }
            generate_tap_rules_direction($ruleset, $group_rules, $iface, $netid, $macaddr, $rules->{$vmid}->{out}, $bridge, 'OUT');
        }
     }

+
+    # allow traffic from lo (ourself)
+    ruleset_addrule($ruleset, "PVEFW-INPUT", "-i lo -j ACCEPT");
+

     return $ruleset;
 }
 
     return $ruleset;
 }