Alon Bar-Lev has posted comments on this change. Change subject: packaging: use default INPUT chain ......................................................................
Patch Set 1: (2 inline comments) .................................................... File packaging/fedora/setup/engine-setup.py Line 915: Line 916: for portCfg in ports: Line 917: for protocol in portCfg["protocol"]: Line 918: lines.append( Line 919: "-A INPUT -p %s -m state --state NEW -m %s --dport %s -j ACCEPT" % ( I synced with the way fedora 17 generate the rules... Line 920: protocol, Line 921: protocol, Line 922: portCfg["port"] Line 923: ) .................................................... File packaging/fedora/setup/iptables.default Line 2: #filtering rules Line 3: *filter Line 4: :INPUT ACCEPT [0:0] Line 5: :FORWARD ACCEPT [0:0] Line 6: :OUTPUT ACCEPT [52:9697] Done Line 7: -A INPUT -i lo -j ACCEPT Line 8: -A INPUT -p icmp -m icmp --icmp-type any -j ACCEPT Line 9: -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT Line 10: -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT -- To view, visit http://gerrit.ovirt.org/8377 To unsubscribe, visit http://gerrit.ovirt.org/settings Gerrit-MessageType: comment Gerrit-Change-Id: I8cfbabc31c964c9ff2374e32e1c65d3611f0883c Gerrit-PatchSet: 1 Gerrit-Project: ovirt-engine Gerrit-Branch: master Gerrit-Owner: Alon Bar-Lev <alo...@redhat.com> Gerrit-Reviewer: Alex Lourie <alou...@redhat.com> Gerrit-Reviewer: Alon Bar-Lev <alo...@redhat.com> Gerrit-Reviewer: Juan Hernandez <juan.hernan...@redhat.com> Gerrit-Reviewer: Moran Goldboim <mgold...@redhat.com> Gerrit-Reviewer: Ofer Schreiber <oschr...@redhat.com> _______________________________________________ Engine-patches mailing list Engine-patches@ovirt.org http://lists.ovirt.org/mailman/listinfo/engine-patches