Skip to content

Fix bad order of iptables filter rules#961

Merged
sanimej merged 1 commit into
moby:masterfrom
JrCs:fix-iptables-order
Mar 6, 2017
Merged

Fix bad order of iptables filter rules#961
sanimej merged 1 commit into
moby:masterfrom
JrCs:fix-iptables-order

Conversation

@JrCs

@JrCs JrCs commented Feb 21, 2016

Copy link
Copy Markdown
Contributor

Rules with ctstate RELATED,ESTABLISHED must be create before same rules without ctstate.

See moby/moby#18911

@JrCs JrCs force-pushed the fix-iptables-order branch 3 times, most recently from ecc3a09 to 53d0c8a Compare February 24, 2016 12:44
@mavenugo

Copy link
Copy Markdown
Contributor

@aboch can you PTAL

@aboch

aboch commented Apr 12, 2016

Copy link
Copy Markdown
Contributor

I cannot get all the integ tests pass with this change.
@JrCs can you take a look:

sudo make clean integration-tests

(make sure to also patch 389d498)

Rules with ctstate RELATED,ESTABLISHED must be create before same
rules without ctstate.

Signed-off-by: Yves Blusseau <[email protected]>
@JrCs JrCs force-pushed the fix-iptables-order branch from 53d0c8a to d0ca14b Compare April 17, 2016 13:06
@JrCs

JrCs commented Apr 17, 2016

Copy link
Copy Markdown
Contributor Author

I have rebase my PR.
All tests are now successful.

@aboch

aboch commented Apr 20, 2016

Copy link
Copy Markdown
Contributor

LGTM

@JrCs

JrCs commented Jun 28, 2016

Copy link
Copy Markdown
Contributor Author

Do you think it will be merge soon ?

@sanimej

sanimej commented Mar 6, 2017

Copy link
Copy Markdown

@JrCs Thanks and sorry about the really long delay. LGTM.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants