[ovirt-users] iptables management

[Alon Bar-Lev]

----- Original Message -----
> From: "Chris Adams" <cma at cmadams.net>
> To: users at ovirt.org
> Sent: Monday, November 17, 2014 8:48:59 PM
> Subject: [ovirt-users] iptables management
> 
> During setup, I allowed the script to change iptables rules.  Is this
> necessary?  Also, is it an "active" management (where oVirt will make
> changes), or just a one-time thing?
> 
> I ask because I have some other iptables setup I want (such as limited
> SSH access), and I don't want to make changes to iptables that oVirt
> will override later or anything like that.

I guess you mean engine setup, right?
Each time you run engine-setup you will be prompt if you want to override iptables settings.
If you choose to override, the current settings will be backed up and you can diff and re-apply your own.
If you choose to keep your settings, setup will write the iptables rules into own location and you can diff and apply the changes manually.

Alon