vm/iptables: do not MASQUERADE packets on lo (#416)

Masquerading packets on lo actually drops them when there is no default route.
This causes problems with commutication between ntpd processes (ntp main
daemon and resolver). And perhaps many more...
This commit is contained in:
Marek Marczykowski 2012-01-13 20:42:31 +01:00
parent 1b349b782d
commit b5fff2564f

View File

@ -6,6 +6,7 @@
:PR-QBS - [0:0]
-A PREROUTING -j PR-QBS
-A POSTROUTING -o vif+ -j ACCEPT
-A POSTROUTING -o lo -j ACCEPT
-A POSTROUTING -j MASQUERADE
COMMIT
# Completed on Mon Sep 6 08:57:46 2010