kotovalexarian-likes-github/moby--moby
1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2022-11-09 12:21:53 -05:00
Code Releases Activity

Configure iptables forward policy when ip forwarding is enabled

Browse source 
Signed-off-by: Leonardo Nodari <me@leonardonodari.it>
This commit is contained in:
Leonardo Nodari 2019-09-12 15:18:18 +02:00
parent b8f02469bc
commit 7e584c1d69
1 changed files with 5 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
libnetwork/drivers/bridge/setup_ip_forwarding.go
View file

@ -34,11 +34,11 @@ func setupIPForwarding(enableIPTables bool) error {
if err := configureIPForwarding(true); err != nil { if err := configureIPForwarding(true); err != nil {
return fmt.Errorf("Enabling IP forwarding failed: %v", err) return fmt.Errorf("Enabling IP forwarding failed: %v", err)
} }
// When enabling ip_forward set the default policy on forward chain to }
// drop only if the daemon option iptables is not set to false.
if !enableIPTables { // Set the default policy on forward chain to drop only if the
return nil // daemon option iptables is not set to false.
} if enableIPTables {
if err := iptables.SetDefaultPolicy(iptables.Filter, "FORWARD", iptables.Drop); err != nil { if err := iptables.SetDefaultPolicy(iptables.Filter, "FORWARD", iptables.Drop); err != nil {
if err := configureIPForwarding(false); err != nil { if err := configureIPForwarding(false); err != nil {
logrus.Errorf("Disabling IP forwarding failed, %v", err) logrus.Errorf("Disabling IP forwarding failed, %v", err)