vm/iptables: do not MASQUERADE packets on lo (#416)
Masquerading packets on lo actually drops them when there is no default route. This causes problems with commutication between ntpd processes (ntp main daemon and resolver). And perhaps many more...
This commit is contained in:
parent
1b349b782d
commit
b5fff2564f
@ -6,6 +6,7 @@
|
||||
:PR-QBS - [0:0]
|
||||
-A PREROUTING -j PR-QBS
|
||||
-A POSTROUTING -o vif+ -j ACCEPT
|
||||
-A POSTROUTING -o lo -j ACCEPT
|
||||
-A POSTROUTING -j MASQUERADE
|
||||
COMMIT
|
||||
# Completed on Mon Sep 6 08:57:46 2010
|
||||
|
Loading…
Reference in New Issue
Block a user