From: Gene Czarcinski <gene@czarc.net>
Date: Tue, 30 Oct 2012 21:18:34 +0000 (-0400)
Subject: bugfix: ip6tables rule removal
X-Git-Tag: v0.10.2.2~59
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c3cc4c18354a2c4c90cd01ea413a22fe03d6a35d;p=thirdparty%2Flibvirt.git

bugfix: ip6tables rule removal

Three FORWARD chain rules are added and two INPUT chain rules
are added when a network is started but only the FORWARD chain
rules are removed when the network is destroyed.
(cherry picked from commit adaa7ab653b0f841aa549e9f47f9e63ee1d15b37)
---

diff --git a/src/network/bridge_driver.c b/src/network/bridge_driver.c
index 8b270af6b6..7c39363518 100644
--- a/src/network/bridge_driver.c
+++ b/src/network/bridge_driver.c
@@ -1627,6 +1627,8 @@ networkRemoveGeneralIp6tablesRules(struct network_driver *driver,
     if (!virNetworkDefGetIpByIndex(network->def, AF_INET6, 0))
         return;
 
+    iptablesRemoveUdpInput(driver->iptables, AF_INET6, network->def->bridge, 53);
+    iptablesRemoveTcpInput(driver->iptables, AF_INET6, network->def->bridge, 53);
     iptablesRemoveForwardAllowCross(driver->iptables, AF_INET6, network->def->bridge);
     iptablesRemoveForwardRejectIn(driver->iptables, AF_INET6, network->def->bridge);
     iptablesRemoveForwardRejectOut(driver->iptables, AF_INET6, network->def->bridge);