Merge pull request #801 from MissionCriticalCloud/fix/conntrackd-fire…

…wall-port Fix conntrackd firewall port
MissionCriticalCloud · Dec 3, 2018 · 4652e07 · 4652e07
2 parents 09dd480 + 8684ae5
commit 4652e07
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/cosmic-core/systemvm/patches/centos7/opt/cosmic/router/bin/cs/firewall.py b/cosmic-core/systemvm/patches/centos7/opt/cosmic/router/bin/cs/firewall.py
@@ -140,8 +140,8 @@ def add_sync_vpc_rules(self, device):
         if self.config.get_advert_method() == "UNICAST":
             self.fw.append(["filter", "", "-A INPUT -i %s -p vrrp -j ACCEPT" % device])
             self.fw.append(["filter", "", "-A OUTPUT -o %s -p vrrp -j ACCEPT" % device])
-            self.fw.append(["filter", "", "-A INPUT -i %s -p 3780 -j ACCEPT" % device])
-            self.fw.append(["filter", "", "-A OUTPUT -o %s -p 3780 -j ACCEPT" % device])
+            self.fw.append(["filter", "", "-A INPUT -i %s -p tcp --dport 3780 -j ACCEPT" % device])
+            self.fw.append(["filter", "", "-A OUTPUT -o %s -p tcp --dport 3780 -j ACCEPT" % device])
 
     def add_public_vpc_rules(self, device):
         logging.info("Configuring Public VPC rules")