Remove the checksum fills
The checksum fill was created a long time ago in a cloud far far away. Checksums on the lxc bridge were needed back in the days when Icehouse was a popular band and Juno was a funny movie. These tasks are no longer required and should be removed as they do nothing but spam DMESG with kernel stacktraces and nothing about that is cute or funny. Change-Id: I2242725682056491106ab8012ad1fa9d0e7f9ecd Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>
This commit is contained in:
parent
0c3defe11f
commit
7e38fbb137
@ -66,17 +66,6 @@ function remove_rules {
|
||||
-d "${LXC_NETWORK}" \
|
||||
-j MASQUERADE || true
|
||||
|
||||
# Remove rules from the mangle POSTROUTING chain
|
||||
iptables ${USE_IPTABLES_LOCK} -t mangle \
|
||||
-D POSTROUTING \
|
||||
-s "${LXC_NETWORK}" \
|
||||
-o "${LXC_BRIDGE}" \
|
||||
-p udp \
|
||||
-m udp \
|
||||
--dport 68 \
|
||||
-j CHECKSUM \
|
||||
--checksum-fill
|
||||
|
||||
if [ "$LXC_IPV6_NAT" = "true" ]; then
|
||||
ip6tables ${USE_IPTABLES_LOCK} -t nat -D POSTROUTING -s ${LXC_IPV6_NETWORK} ! -d ${LXC_IPV6_NETWORK} -j MASQUERADE
|
||||
fi
|
||||
@ -118,16 +107,6 @@ function add_rules {
|
||||
-d "${LXC_NETWORK}" \
|
||||
-j MASQUERADE
|
||||
|
||||
# Add rules to the mangle POSTROUTING chain
|
||||
iptables ${USE_IPTABLES_LOCK} -t mangle \
|
||||
-A POSTROUTING \
|
||||
-s "${LXC_NETWORK}" \
|
||||
-o "${LXC_BRIDGE}" \
|
||||
-p udp \
|
||||
-m udp \
|
||||
--dport 68 \
|
||||
-j CHECKSUM \
|
||||
--checksum-fill
|
||||
success "LXC IPtables rules created."
|
||||
}
|
||||
|
||||
|
Loading…
x
Reference in New Issue
Block a user