From: Barış Metin Date: Tue, 11 Jan 2011 12:10:51 +0000 (+0100) Subject: disable netfilter calls for bridge interface (they cause panick on 2.6.35 anyway) X-Git-Tag: tests-5.0-22~9 X-Git-Url: http://git.onelab.eu/?a=commitdiff_plain;h=8c92c404b6192b933bd27353340ca43d978a1208;p=tests.git disable netfilter calls for bridge interface (they cause panick on 2.6.35 anyway) --- diff --git a/system/template-qemu/qemu-bridge-init b/system/template-qemu/qemu-bridge-init index 005944e..b43edfa 100755 --- a/system/template-qemu/qemu-bridge-init +++ b/system/template-qemu/qemu-bridge-init @@ -31,7 +31,13 @@ start () { netstat -rn echo "========== $COMMAND: entering start - end" -# -A FORWARD -m physdev --physdev-is-bridged -j ACCEPT + # disable netfilter calls for bridge interface (they cause panick on 2.6.35 anyway) + # + # another option would be to accept the all forward packages for + # bridged interface like: -A FORWARD -m physdev --physdev-is-bridged -j ACCEPT + sysctl net.bridge.bridge-nf-call-iptables=0 + sysctl net.bridge.bridge-nf-call-ip6tables=0 + sysctl net.bridge.bridge-nf-call-arptables=0 # take extra arg for ifname, if provided [ -n "$1" ] && { INTERFACE_LAN=$1; shift ; }