By the way the whole reason that I had to reset the IP tables was because I could not traceroute any of my servers. Now I see why. The Virtulizor strikes again.
I guess after the latest update when you rebuild a VM with multiple IPs you end up with iptables like this:
Code Chain FORWARD (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere PHYSDEV match --physdev-in eth0 ! --physdev-out eth0
ACCEPT all -- anywhere anywhere PHYSDEV match ! --physdev-in eth0 --physdev-out eth0
ACCEPT all -- cloudone.bitronictech.net anywhere PHYSDEV match --physdev-in vif1101.0
ACCEPT all -- cloudone.bitronictech.net anywhere PHYSDEV match --physdev-in vif1101.0
ACCEPT all -- cloudone.bitronictech.net anywhere PHYSDEV match --physdev-in vif1101.0
ACCEPT all -- cloudone.bitronictech.net anywhere PHYSDEV match --physdev-in vif1101.0
ACCEPT all -- cloudone.bitronictech.net anywhere PHYSDEV match --physdev-in vif1101.0
ACCEPT all -- cloudone.bitronictech.net anywhere PHYSDEV match --physdev-in vif1101.0
ACCEPT all -- cloudone.bitronictech.net anywhere PHYSDEV match --physdev-in vif1101.0
ACCEPT all -- cloudone.bitronictech.net anywhere PHYSDEV match --physdev-in vif1101.0
ACCEPT all -- powerhub.bitronictech.net anywhere PHYSDEV match --physdev-in vif1101.0
ACCEPT all -- cloudone.bitronictech.net anywhere PHYSDEV match --physdev-in vif1101.0
ACCEPT all -- cloudone.bitronictech.net anywhere PHYSDEV match --physdev-in vif1101.0
ACCEPT all -- cloudone.bitronictech.net anywhere PHYSDEV match --physdev-in vif1101.0
ACCEPT all -- cloudone.bitronictech.net anywhere PHYSDEV match --physdev-in vif1101.0
ACCEPT all -- cloudone.bitronictech.net anywhere PHYSDEV match --physdev-in vif1101.0
ACCEPT all -- cloudone.bitronictech.net anywhere PHYSDEV match --physdev-in vif1101.0
ACCEPT all -- cloudone.bitronictech.net anywhere PHYSDEV match --physdev-in vif1101.0
ACCEPT all -- cloudone.bitronictech.net anywhere PHYSDEV match --physdev-in vif1101.0
ACCEPT all -- cloudone.bitronictech.net anywhere PHYSDEV match --physdev-in vif1101.0
ACCEPT all -- cloudone.bitronictech.net anywhere PHYSDEV match --physdev-in vif1101.0
ACCEPT all -- powerhub.bitronictech.net anywhere PHYSDEV match --physdev-in vif1101.0
ACCEPT udp -- anywhere anywhere PHYSDEV match --physdev-in vif1101.0 udp spt:bootpc dpt:bootps
Obviously a problem. It is getting the hostname instead of the IP, which is screwing the hell out of all the packet routing.
I'll be opening a ticket and referencing this forum. This needs to be patched immediately.
|
January 25, 2014, 7:43 am | Post: 1
