Changes between Version 12 and Version 13 of TipAndDoc/VM/KVM

Timestamp:

Feb 16, 2012 10:43:56 AM (13 years ago)

Author:

mitty

Comment:

--

TipAndDoc/VM/KVM

@@ -52 +52 @@
 }}}
   * lease file => /var/lib/misc/dnsmasq.leases
+
+ == iptables ==
+ * sudo iptables-save
+{{{
+# Generated by iptables-save v1.4.8 on Thu Feb 16 10:31:29 2012
+*nat
+:PREROUTING ACCEPT [743892:129452770]
+:POSTROUTING ACCEPT [1179:112796]
+:OUTPUT ACCEPT [1215:115607]
+-A POSTROUTING -s 192.168.122.0/24 ! -d 192.168.122.0/24 -p tcp -j MASQUERADE --to-ports 1024-65535 
+-A POSTROUTING -s 192.168.122.0/24 ! -d 192.168.122.0/24 -p udp -j MASQUERADE --to-ports 1024-65535 
+-A POSTROUTING -s 192.168.122.0/24 ! -d 192.168.122.0/24 -j MASQUERADE 
+COMMIT
+# Completed on Thu Feb 16 10:31:29 2012
+# Generated by iptables-save v1.4.8 on Thu Feb 16 10:31:29 2012
+*filter
+:INPUT ACCEPT [4957020:3457557240]
+:FORWARD ACCEPT [0:0]
+:OUTPUT ACCEPT [3323525:4327643495]
+-A INPUT -i virbr0 -p udp -m udp --dport 53 -j ACCEPT 
+-A INPUT -i virbr0 -p tcp -m tcp --dport 53 -j ACCEPT 
+-A INPUT -i virbr0 -p udp -m udp --dport 67 -j ACCEPT 
+-A INPUT -i virbr0 -p tcp -m tcp --dport 67 -j ACCEPT 
+-A FORWARD -d 192.168.122.0/24 -o virbr0 -m state --state RELATED,ESTABLISHED -j ACCEPT 
+-A FORWARD -s 192.168.122.0/24 -i virbr0 -j ACCEPT 
+-A FORWARD -i virbr0 -o virbr0 -j ACCEPT 
+-A FORWARD -o virbr0 -j REJECT --reject-with icmp-port-unreachable 
+-A FORWARD -i virbr0 -j REJECT --reject-with icmp-port-unreachable 
+COMMIT
+# Completed on Thu Feb 16 10:31:29 2012
+}}}
+  * lease file => /var/lib/misc/dnsmasq.leases