X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=iptables.py;h=faadd7c4120032fc8cb7b1c901a0be8d483f9985;hb=fdd20b8422fe29c219ce2c5985ec191fa1b5c1aa;hp=fa83ee6c14814f9e26b0322fe197cfc42ec04b2c;hpb=e64ef2834756a1a4e3f8d0dc843eb144f528f11e;p=nodemanager.git

diff --git a/iptables.py b/iptables.py
index fa83ee6..faadd7c 100644
--- a/iptables.py
+++ b/iptables.py
@@ -35,17 +35,20 @@ class IPTables:
         if (len(self.extifs) + len(self.intifs) + len(self.pfs)) == 0:
             return True
 
-        restore = subprocess.Popen([self.IPTABLES_RESTORE], stdin=subprocess.PIPE)
+        restore = subprocess.Popen([self.IPTABLES_RESTORE, "--noflush"], stdin=subprocess.PIPE)
         restore.stdin.write("""*filter
 :INPUT ACCEPT [0:0]
 :FORWARD ACCEPT [0:0]
 :OUTPUT ACCEPT [0:0]
-:BLACKLIST - [0:0]
 :LOGDROP - [0:0]
 :SLICESPRE - [0:0]
 :SLICES - [0:0]
 :PORTFW - [0:0]
 
+-F INPUT
+-F FORWARD
+-F OUTPUT
+
 -A LOGDROP -j LOG
 -A LOGDROP -j DROP
 -A OUTPUT -j BLACKLIST
@@ -79,6 +82,10 @@ class IPTables:
 :OUTPUT ACCEPT [0:0]
 :PORTFW - [0:0]
 :MASQ - [0:0]
+
+-F PREROUTING
+-F POSTROUTING
+-F OUTPUT
 """)
 
         for ext in self.extifs: