[pve-devel] firewall and IGMP

[Alexandre DERUMIER]

Ok, I'll test igmp and multicast with them today
----- Mail original ----- 

De: "Dietmar Maurer" <dietmar at proxmox.com> 
À: "Alexandre DERUMIER" <aderumier at odiso.com> 
Cc: pve-devel at pve.proxmox.com 
Envoyé: Mercredi 21 Mai 2014 06:05:21 
Objet: RE: [pve-devel] firewall and IGMP 


> ruleset_addrule($ruleset, $chain, "-m addrtype --dst-type MULTICAST -j 
> ACCEPT"); 

I reworked the corosync rules, so we now have this: 

-A PVEFW-HOST-IN -s 192.168.0.0/20 -d 192.168.0.0/20 -p udp --dport 5404:5405 -j RETURN 
-A PVEFW-HOST-IN -s 192.168.0.0/20 -m addrtype --dst-type MULTICAST -p udp --dport 5404:5405 -j RETURN 

-A PVEFW-HOST-OUT -d 192.168.0.0/20 -p udp --dport 5404:5405 -j RETURN 
-A PVEFW-HOST-OUT -m addrtype --dst-type MULTICAST -p udp --dport 5404:5405 -j RETURN