From: Thierry Parmentelat Date: Fri, 7 Jun 2013 09:28:12 +0000 (+0200) Subject: Giuseppe's patch for ignoring output of iptables when dropping inexisting rules X-Git-Tag: vsys-scripts-0.95-47~1 X-Git-Url: http://git.onelab.eu/?p=vsys-scripts.git;a=commitdiff_plain;h=fc9a8232bbbb83494c0918b908db47c37b7e3cc9 Giuseppe's patch for ignoring output of iptables when dropping inexisting rules --- diff --git a/root-context/exec/vif_up b/root-context/exec/vif_up index d4862d5..eb75879 100755 --- a/root-context/exec/vif_up +++ b/root-context/exec/vif_up @@ -246,7 +246,7 @@ cmd_iptables_pr = "/sbin/iptables -t nat -A POSTROUTING -s %s/%d -j SNAT --to-so cmd_iptables_del_pr = "/sbin/iptables -t nat -D POSTROUTING -s %s/%d -j SNAT --to-source %s --random > /dev/null 2>&1" % (vip, vmask, public_src) cmd_iptables_dk = "/sbin/iptables -I OUTPUT -p tcp -s %s/%d --tcp-flags RST RST -j DROP"%(vip,vmask) -cmd_iptables_del_dk = "/sbin/iptables -D OUTPUT -p tcp -s %s/%d --tcp-flags RST RST -j DROP"%(vip,vmask) +cmd_iptables_del_dk = "/sbin/iptables -D OUTPUT -p tcp -s %s/%d --tcp-flags RST RST -j DROP > /dev/null 2>&1"%(vip,vmask) if opt_gre: cmd_gre_setup = "modprobe ip_gre ; ip link add %s type %s remote %s local %s ttl 64 csum key %s" % (