[pve-devel] firewall and IGMP

[Dietmar Maurer]

> ruleset_addrule($ruleset, $chain, "-m addrtype --dst-type MULTICAST -j
> ACCEPT");

I reworked the corosync rules, so we now have this:

	-A PVEFW-HOST-IN -s 192.168.0.0/20 -d 192.168.0.0/20 -p udp --dport 5404:5405 -j RETURN
	-A PVEFW-HOST-IN -s 192.168.0.0/20 -m addrtype --dst-type MULTICAST -p udp --dport 5404:5405 -j RETURN

	-A PVEFW-HOST-OUT -d 192.168.0.0/20 -p udp --dport 5404:5405 -j RETURN
	-A PVEFW-HOST-OUT -m addrtype --dst-type MULTICAST -p udp --dport 5404:5405 -j RETURN