<div dir="ltr"><div class="gmail_default">Are you referring to /etc/sysconfig/iptables ? That's where the engine setup configures iptables, when I provision my nodes I select "Don't configure firewall" and let puppet manage my iptables rules for other reasons.. not sure if that was what you're asking</div>
<div class="gmail_default" style="font-family:tahoma,sans-serif"><span style="font-family:arial"><br></span></div><div class="gmail_default" style="font-family:tahoma,sans-serif"><span style="font-family:arial">On Tue, Oct 1, 2013 at 11:16 PM, Sven Kieske </span><span dir="ltr" style="font-family:arial"><<a href="mailto:S.Kieske@mittwald.de" target="_blank">S.Kieske@mittwald.de</a>></span><span style="font-family:arial"> wrote:</span><br>
</div><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
<br>
we have an test environment with ovirt 3.3 installed on various<br>
hardware nodes.<br>
<br>
The management node is installed on an centos 6.4 x64 minimal.<br>
<br>
The issue we are running into is, that some ovirt component<br>
keeps resetting the iptables firewall configuration, denying<br>
access to ports 80 and 443, which results in the web interface<br>
being not accessible.<br>
<br>
We do know that the engine-setup initially configures the<br>
firewall, but through which scripts does iptables get configured?<br>
<br>
Are there some database entries for this?<br>
<br>
If you need any logfiles for this, please let me know.<br>
<br>
Currently we have disabled iptables, as it's just an test environment.<br>
<br>
We read about some "vdsm bootstrap script" (e.g. BZ 893680), may this be<br>
related?<br>
<br>
However we didn't find out where this scripts resides.<br>
<br>
Also <a href="mailto:vvyazmin@redhat.com">vvyazmin@redhat.com</a> posted in this BZ: "not a bug".<br>
<br>
I don't see why you shouldn't be able to ping the hypervisor in the<br>
management lan? this is useful for monitoring and network debugging.<br>
<br>
ICMP is no danger at all.<br>
<br>
<br>
Kind regards<br>
<span class="HOEnZb"><font color="#888888"><br>
Sven Kieske<br>
_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@ovirt.org">Users@ovirt.org</a><br>
<a href="http://lists.ovirt.org/mailman/listinfo/users" target="_blank">http://lists.ovirt.org/mailman/listinfo/users</a><br>
</font></span></blockquote></div><br></div></div>