<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <div class="moz-cite-prefix">On 2013&#24180;12&#26376;18&#26085; 19:00, Mark Wu wrote:<br>
    </div>
    <blockquote cite="mid:52B18067.8050601@linux.vnet.ibm.com"
      type="cite">
      <meta content="text/html; charset=ISO-8859-1"
        http-equiv="Content-Type">
      <div class="moz-cite-prefix">On 12/17/2013 02:36 PM, <a
          moz-do-not-send="true" class="moz-txt-link-abbreviated"
          href="mailto:taget@linux.vnet.ibm.com">taget@linux.vnet.ibm.com</a>
        wrote:<br>
      </div>
      <blockquote
        cite="mid:1387262194-5265-1-git-send-email-taget@linux.vnet.ibm.com"
        type="cite">
        <pre wrap="">From: Eli Qiao <a moz-do-not-send="true" class="moz-txt-link-rfc2396E" href="mailto:taget@linux.vnet.ibm.com">&lt;taget@linux.vnet.ibm.com&gt;</a>

Signed-off-by: Eli Qiao <a moz-do-not-send="true" class="moz-txt-link-rfc2396E" href="mailto:taget@linux.vnet.ibm.com">&lt;taget@linux.vnet.ibm.com&gt;</a>
---
 contrib/kimchi.spec.fedora.in |    5 +++++
 contrib/kimchi.spec.suse.in   |    5 +++++
 2 files changed, 10 insertions(+), 0 deletions(-)

diff --git a/contrib/kimchi.spec.fedora.in b/contrib/kimchi.spec.fedora.in
index 14ec359..f21ae49 100644
--- a/contrib/kimchi.spec.fedora.in
+++ b/contrib/kimchi.spec.fedora.in
@@ -81,6 +81,11 @@ if [ $1 -eq 1 ] ; then
     /bin/systemctl daemon-reload &gt;/dev/null 2&gt;&amp;1 || :
 fi

+# open 8000 and 8001 port for firewall
+
+iptables -I INPUT -p tcp --dport 8000 -j ACCEPT
+iptables -I INPUT -p tcp --dport 8001 -j ACCEPT
+
 %if 0%{?rhel} == 6
 start kimchid
 %else
diff --git a/contrib/kimchi.spec.suse.in b/contrib/kimchi.spec.suse.in
index 9051284..5209e03 100644
--- a/contrib/kimchi.spec.suse.in
+++ b/contrib/kimchi.spec.suse.in
@@ -47,6 +47,11 @@ install -Dm 0755 contrib/kimchid.sysvinit %{buildroot}%{_initrddir}/kimchid
 service kimchid start
 chkconfig kimchid on

+# open 8000 and 8001 port for firewall
+
+iptables -I INPUT -p tcp --dport 8000 -j ACCEPT
+iptables -I INPUT -p tcp --dport 8001 -j ACCEPT
+
 %preun
 service kimchid stop

</pre>
      </blockquote>
      Eli, <br>
      Thanks for the patch. But it's not a reliable configuration. This
      rule will be lost after reboot.<br>
      And shipping a configuration file is better than running commands
      in spec file.<br>
      <br>
      Please take a look at firewalld and firewalld.service
      <meta http-equiv="content-type" content="text/html;
        charset=ISO-8859-1">
      <a moz-do-not-send="true"
href="http://manpages.ubuntu.com/manpages/raring/man5/firewalld.service.5.html">http://manpages.ubuntu.com/manpages/raring/man5/firewalld.service.5.html</a><br>
      <br>
      It could be a better solution for the platforms where firewalld is
      available.<br>
    </blockquote>
    Good point, took a look at vdsm, it manipulates with
    '/etc/sysconfig/iptables' when installation. We may also try this
    way.<br>
    <blockquote cite="mid:52B18067.8050601@linux.vnet.ibm.com"
      type="cite"> -- <br>
      project-kimchi mailing list
      <a class="moz-txt-link-rfc2396E" href="mailto:project-kimchi@googlegroups.com">&lt;project-kimchi@googlegroups.com&gt;</a><br>
      <a moz-do-not-send="true"
        href="https://groups.google.com/forum/#%21forum/project-kimchi">https://groups.google.com/forum/#!forum/project-kimchi</a><br>
      --- <br>
      You received this message because you are subscribed to the Google
      Groups "project-kimchi" group.<br>
      To unsubscribe from this group and stop receiving emails from it,
      send an email to <a class="moz-txt-link-abbreviated" href="mailto:project-kimchi+unsubscribe@googlegroups.com">project-kimchi+unsubscribe@googlegroups.com</a>.<br>
      For more options, visit <a moz-do-not-send="true"
        href="https://groups.google.com/groups/opt_out">https://groups.google.com/groups/opt_out</a>.<br>
    </blockquote>
    <br>
  </body>
</html>

<p></p>

-- <br />
project-kimchi mailing list &lt;project-kimchi@googlegroups.com&gt;<br />
<a href="https://groups.google.com/forum/#!forum/project-kimchi">https://groups.google.com/forum/#!forum/project-kimchi</a><br />
--- <br />
You received this message because you are subscribed to the Google Groups &quot;project-kimchi&quot; group.<br />
To unsubscribe from this group and stop receiving emails from it, send an email to project-kimchi+unsubscribe@googlegroups.com.<br />
For more options, visit <a href="https://groups.google.com/groups/opt_out">https://groups.google.com/groups/opt_out</a>.<br />