[pve-devel] pve-firewall : iptables V2

Stefan Priebe s.priebe at profihost.ag
Thu Feb 13 20:45:38 CET 2014


Am 13.02.2014 17:53, schrieb Dietmar Maurer:
>> Seem to be fixed this year (so,I don't think is already backported in debian
>> wheezy)
>>
>> ip[6]tables: Add locking to prevent concurrent instances
>> http://git.netfilter.org/iptables/commit/?id=93587a04d0f2511e108bbc4d87a8b
>> 9d28a5c5dd8
>
> FYI, I already added al big lock around the pvefw API:
>
> https://git.proxmox.com/?p=pve-firewall.git;a=commitdiff;h=06320eb0823c756df8dc836ecd4325839fb768e2
>
> so that will not happen anyways if you only use 'pvefw'.
>

but this does not help if another process on the system does iptables...

Stefan



More information about the pve-devel mailing list