On new rhel7 virthosts allow forwarding.

2014-06-24 18:09:58 +00:00 · 2014-06-24 18:09:58 +00:00 · 92e0239c16
commit 92e0239c16
parent b108e4f631
3 changed files with 8 additions and 0 deletions
--- a/inventory/group_vars/bvirthost
+++ b/inventory/group_vars/bvirthost
@ -0,0 +1,2 @@
+---
+virthost: true
--- a/inventory/group_vars/virthost
+++ b/inventory/group_vars/virthost
@ -0,0 +1,2 @@
+---
+virthost: true
--- a/roles/base/templates/iptables/iptables
+++ b/roles/base/templates/iptables/iptables
@ -54,5 +54,9 @@

 # otherwise kick everything out
 -A INPUT -j REJECT --reject-with icmp-host-prohibited
+{% if virthost is defined %}
+-A FORWARD -j ACCEPT
+{% else %}
 -A FORWARD -j REJECT --reject-with icmp-host-prohibited
+{% endif %}
 COMMIT