diff --git a/templates/lxc-system-manage.j2 b/templates/lxc-system-manage.j2 index 21df4f39..31d5ccef 100644 --- a/templates/lxc-system-manage.j2 +++ b/templates/lxc-system-manage.j2 @@ -66,17 +66,6 @@ function remove_rules { -d "${LXC_NETWORK}" \ -j MASQUERADE || true - # Remove rules from the mangle POSTROUTING chain - iptables ${USE_IPTABLES_LOCK} -t mangle \ - -D POSTROUTING \ - -s "${LXC_NETWORK}" \ - -o "${LXC_BRIDGE}" \ - -p udp \ - -m udp \ - --dport 68 \ - -j CHECKSUM \ - --checksum-fill - if [ "$LXC_IPV6_NAT" = "true" ]; then ip6tables ${USE_IPTABLES_LOCK} -t nat -D POSTROUTING -s ${LXC_IPV6_NETWORK} ! -d ${LXC_IPV6_NETWORK} -j MASQUERADE fi @@ -118,16 +107,6 @@ function add_rules { -d "${LXC_NETWORK}" \ -j MASQUERADE - # Add rules to the mangle POSTROUTING chain - iptables ${USE_IPTABLES_LOCK} -t mangle \ - -A POSTROUTING \ - -s "${LXC_NETWORK}" \ - -o "${LXC_BRIDGE}" \ - -p udp \ - -m udp \ - --dport 68 \ - -j CHECKSUM \ - --checksum-fill success "LXC IPtables rules created." }