Initscripts to support VNET and PlanetFlow

diff --git a/iptables.spec b/iptables.spec
index a918e62..1a36e5f 100644 (file)
--- a/iptables.spec
+++ b/iptables.spec
@@ -24,6 +24,7 @@ Release: %{release}
 Source: http://www.netfilter.org/%{name}-%{version}.tar.bz2
 %define SOURCE1 iptables.init
 %define SOURCE2 iptables-config
+%define SOURCE3 planetlab-config
 Group: System Environment/Base
 #URL: http://www.netfilter.org/
 BuildRoot: %{_tmppath}/%{name}-buildroot
@@ -105,6 +106,7 @@ sed -e 's;iptables;ip6tables;g' -e 's;IPTABLES;IP6TABLES;g' < %{SOURCE1} > ip6ta
 install -c -m755 ip6tables.init $RPM_BUILD_ROOT/etc/rc.d/init.d/ip6tables
 mkdir -p $RPM_BUILD_ROOT/etc/sysconfig
 install -c -m755 %{SOURCE2} $RPM_BUILD_ROOT/etc/sysconfig/iptables-config
+install -c -m755 %{SOURCE3} $RPM_BUILD_ROOT/etc/sysconfig/iptables
 sed -e 's;iptables;ip6tables;g' -e 's;IPTABLES;IP6TABLES;g' < %{SOURCE2} > ip6tables-config
 install -c -m755 ip6tables-config $RPM_BUILD_ROOT/etc/sysconfig/ip6tables-config
 

diff --git a/planetlab-config b/planetlab-config
new file mode 100644 (file)
index 0000000..c9b42a2
--- /dev/null
+++ b/planetlab-config
@@ -0,0 +1,19 @@
+# Generated by iptables-save v1.3.8 on Wed Feb 20 17:19:51 2008
+*filter
+:INPUT ACCEPT [1208:282502]
+:FORWARD ACCEPT [0:0]
+:OUTPUT ACCEPT [874:100768]
+-A OUTPUT -o eth0 -j ULOG --ulog-cprange 54 --ulog-qthreshold 16 
+COMMIT
+# Completed on Wed Feb 20 17:19:51 2008
+# Generated by iptables-save v1.3.8 on Wed Feb 20 17:19:51 2008
+*mangle
+:PREROUTING ACCEPT [11771:2506707]
+:INPUT ACCEPT [11769:2505789]
+:FORWARD ACCEPT [0:0]
+:OUTPUT ACCEPT [10187:1278566]
+:POSTROUTING ACCEPT [10187:1278566]
+-A INPUT -j MARK --copy-xid 0x0 
+-A OUTPUT -j MARK --copy-xid 0x0 
+COMMIT
+# Completed on Wed Feb 20 17:19:51 2008