Add iptables rule excluding multicast from NAT on 'weave expose'

This commit is contained in:
Bryan Boreham committed 2016-04-13 12:05:24 +01:00
1 parent d4fb739981
commit 045edcca2f
1 file changed
+1
+1
View File
@@ -2129,6 +2129,7 @@ EOF
if ! ip addr show dev $BRIDGE | grep -qF $CIDR ; then
ip addr add dev $BRIDGE $CIDR
arp_update $BRIDGE $CIDR
add_iptables_rule nat WEAVE -s $CIDR -d 224.0.0.0/4 -j RETURN
add_iptables_rule nat WEAVE -d $CIDR ! -s $CIDR -j MASQUERADE
add_iptables_rule nat WEAVE -s $CIDR ! -d $CIDR -j MASQUERADE
fi