File 0001-Use-j-NOTRACK-instead-of-j-CT-notrack.patch of Package openstack-neutron

Overview Repositories Revisions Requests Users Attributes Meta

File 0001-Use-j-NOTRACK-instead-of-j-CT-notrack.patch of Package openstack-neutron

From d39a5886c38b610ed168aeb96f25bf7aa94437fb Mon Sep 17 00:00:00 2001
From: Vincent Untz <vuntz@suse.com>
Date: Thu, 26 Mar 2015 17:25:27 +0100
Subject: [PATCH] Use "-j NOTRACK" instead of "-j CT --notrack"

The latter does not work on SLE11, while the former does (and is only
deprecated in newer versions of iptables).

We only care about this fix in Juno as SLE11 shouldn't matter later on.

Change-Id: I848221bf05b34f0905d98c3549573039d4d2a722
---
 neutron/agent/l3_agent.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/neutron/agent/l3_agent.py b/neutron/agent/l3_agent.py
index 69bde80..c8ef5a5 100644
--- a/neutron/agent/l3_agent.py
+++ b/neutron/agent/l3_agent.py
@@ -1616,7 +1616,7 @@ class L3NATAgent(firewall_l3_agent.FWaaSL3AgentRpcCallback,
             use_ipv6=self.use_ipv6)
         # no connection tracking needed in fip namespace
         ri.fip_iptables_manager.ipv4['raw'].add_rule('PREROUTING',
-                                                     '-j CT --notrack')
+                                                     '-j NOTRACK')
         ri.fip_iptables_manager.apply()
         interface_name = (
             self.get_fip_ext_device_name(self.agent_gateway_port['id']))
-- 
2.1.4

Places

File 0001-Use-j-NOTRACK-instead-of-j-CT-notrack.patch of Package openstack-neutron

Places