vm/network: really place anti-spoof rules in 'raw' table

This fixes commit:
4d68998 vm/network: place anti-spoof rules in 'raw' table
This commit is contained in:
Marek Marczykowski 2012-03-08 14:56:39 +01:00
parent 1d5f54c976
commit 4d0839d05b

View File

@ -48,7 +48,7 @@ if [ "${ip}" ] ; then
${cmdprefix} ip route ${ipcmd} ${addr} dev ${vif} || true
done
echo ${cmdprefix} iptables -t raw $iptables_cmd -i ${vif} \! -s ${ip} -j DROP
${cmdprefix} iptables $iptables_cmd -i ${vif} \! -s ${ip} -j DROP
${cmdprefix} iptables -t raw $iptables_cmd -i ${vif} \! -s ${ip} -j DROP
fi
log debug "Successful vif-route-qubes $command for $vif."