Piotr Kliczewski has submitted this change and it was merged. Change subject: engine: open iptables holes on OVN hosts ...................................................................... engine: open iptables holes on OVN hosts OVN does not currently open any firewall holes for its hosts, and the existing plans are only for firewalld. VDSM needs iptables instead of firewalld. Therefore we need to open iptables holes on our own. Change-Id: I8cda3b30f9ea49cbe5c32c1dfccecce5db4d4f8f Signed-off-by: Marcin Mirecki <mmirecki(a)redhat.com&gt; Bug-Url: https://bugzilla.redhat.com/1416748 --- M packaging/dbscripts/upgrade/pre_upgrade/0000_config.sql 1 file changed, 4 insertions(+), 0 deletions(-) Approvals: Martin Peřina: Looks good to me, approved Marcin Mirecki: Verified Jenkins CI: Passed CI tests -- To view, visit https://gerrit.ovirt.org/72157 To unsubscribe, visit https://gerrit.ovirt.org/settings Gerrit-MessageType: merged Gerrit-Change-Id: I8cda3b30f9ea49cbe5c32c1dfccecce5db4d4f8f Gerrit-PatchSet: 3 Gerrit-Project: ovirt-engine Gerrit-Branch: ovirt-engine-4.1 Gerrit-Owner: Marcin Mirecki <mmirecki(a)redhat.com&gt; Gerrit-Reviewer: Jenkins CI Gerrit-Reviewer: Marcin Mirecki <mmirecki(a)redhat.com&gt; Gerrit-Reviewer: Martin Peřina <mperina(a)redhat.com&gt; Gerrit-Reviewer: Piotr Kliczewski <piotr.kliczewski(a)gmail.com&gt; Gerrit-Reviewer: Tal Nisan <tnisan(a)redhat.com&gt; Gerrit-Reviewer: gerrit-hooks <automation(a)ovirt.org&gt;