From c0413e35deff03474ae5e05fd14aca22454ff194 Mon Sep 17 00:00:00 2001
From: Dietmar Maurer <dietmar@proxmox.com>
Date: Thu, 20 Feb 2014 12:39:38 +0100
Subject: [PATCH 1/1] allow traffic from lo (PVEFW-INPUT)

---
 PVE/Firewall.pm | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/PVE/Firewall.pm b/PVE/Firewall.pm
index 4dd83e9..f7a87ca 100644
--- a/PVE/Firewall.pm
+++ b/PVE/Firewall.pm
@@ -1114,6 +1114,10 @@ sub compile {
 	    generate_tap_rules_direction($ruleset, $group_rules, $iface, $netid, $macaddr, $rules->{$vmid}->{out}, $bridge, 'OUT');
 	}
     }
+
+    # allow traffic from lo (ourself)
+    ruleset_addrule($ruleset, "PVEFW-INPUT", "-i lo -j ACCEPT");
+
     return $ruleset;
 }
 
-- 
2.39.2