From f573ae2cea7c024165b97e4915b55a0d40fd3117 Mon Sep 17 00:00:00 2001 From: Dietmar Maurer Date: Tue, 20 May 2014 06:56:37 +0200 Subject: [PATCH] do not use -s for outgoing corosync rules --- src/PVE/Firewall.pm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/PVE/Firewall.pm b/src/PVE/Firewall.pm index 9b24b5c..cee6a22 100644 --- a/src/PVE/Firewall.pm +++ b/src/PVE/Firewall.pm @@ -1752,8 +1752,8 @@ sub enable_host_firewall { ruleset_addrule($ruleset, $chain, "-d $clusternet -p tcp --dport 22 -j $accept_action"); # SSH my $corosync_rule = "-p udp -m conntrack --ctstate NEW --dport 5404:5405 -j $accept_action"; - ruleset_addrule($ruleset, $chain, "-s $clusternet -d $clusternet $corosync_rule"); - ruleset_addrule($ruleset, $chain, "-s $clusternet -m addrtype --dst-type MULTICAST $corosync_rule"); + ruleset_addrule($ruleset, $chain, "-d $clusternet $corosync_rule"); + ruleset_addrule($ruleset, $chain, "-m addrtype --dst-type MULTICAST $corosync_rule"); } # implement output policy -- 2.39.2