Hi Nux,

The paste links are does not exist.
Can you please upload the logs again. Also upload rules/logs specific to system 
rules are not set.


Thanks,
Jayapal

On 11-Apr-2014, at 9:10 PM, Nux! <n...@li.nux.ro> wrote:

> Hello,
> 
> I'm on 4.3 right now, CentOS6.5 + KVM and SG ADV zone.
> What happens is that after a reboot or after disabling a zone, when the 
> system VMs come back the iptables rules required for their proper functioning 
> do not get set.
> It seems to be happening randomly and it may not be affecting both VMs (S and 
> V) at the same time.
> 
> More info:
> http://paste.fedoraproject.org/93567/72307041/
> sg log: http://paste.fedoraproject.org/93564/23056713/
> 
> The problem always goes away if I stop/start the system VMs; the required 
> iptables rules get created, eg:
> -A s-105-VM -m physdev --physdev-in vnet3 --physdev-is-bridged -j RETURN
> -A s-105-VM -m physdev --physdev-in vnet2 --physdev-is-bridged -j RETURN
> -A s-105-VM -m physdev --physdev-in vnet1 --physdev-is-bridged -j RETURN
> -A s-105-VM -j ACCEPT
> -A v-106-VM -m physdev --physdev-in vnet6 --physdev-is-bridged -j RETURN
> -A v-106-VM -m physdev --physdev-in vnet5 --physdev-is-bridged -j RETURN
> -A v-106-VM -j ACCEPT
> 
> 
> If someone could have a look at this it'd be great. Let me know if more info 
> is needed.
> 
> Lucian
> 
> -- 
> Sent from the Delta quadrant using Borg technology!
> 
> Nux!
> www.nux.ro

Reply via email to