vm/iptables: do not MASQUERADE packets on lo (#416) · b5fff2564f - Gogs

vm/iptables: do not MASQUERADE packets on lo (#416)

Masquerading packets on lo actually drops them when there is no default route.
This causes problems with commutication between ntpd processes (ntp main
daemon and resolver). And perhaps many more...

Marek Marczykowski 12 years ago

parent

1b349b782d

commit

b5fff2564f

1 changed files with 1 additions and 0 deletions

Split View Show Diff Stats

						
							+ 1
							
							- 0
						
network/iptables
							 
								View File
							
				@@ -6,6 +6,7 @@
			
				 :PR-QBS - [0:0]
			
				 -A PREROUTING -j PR-QBS
			
				 -A POSTROUTING -o vif+ -j ACCEPT
			
				+-A POSTROUTING -o lo -j ACCEPT
			
				 -A POSTROUTING -j MASQUERADE
			
				 COMMIT
			
				 # Completed on Mon Sep  6 08:57:46 2010