Add more necessary firewall rules to ovb-instack

Apparently the undercloud firewall configuration changed and no longer works without explicit accept rules for the public network.
cybertron · Jan 3, 2019 · abc95e8 · abc95e8
1 parent ef3315a
commit abc95e8
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/bin/ovb-instack b/bin/ovb-instack
@@ -82,6 +82,8 @@ network_config:
 EOF_CAT
 sudo os-net-config -c /tmp/eth2.cfg -v
 sudo iptables -A POSTROUTING -s 10.0.0.0/24 ! -d 10.0.0.0/24 -j MASQUERADE -t nat
+sudo iptables -I FORWARD -s 10.0.0.0/24 -j ACCEPT
+sudo iptables -I FORWARD -d 10.0.0.0/24 -j ACCEPT
 
 timer 'undercloud install'
 timer