Re: iptables and kvm

[Rob Owens <rowens@ptd.net>]

On Fri, Jan 25, 2013 at 12:55:13PM +0700, Sthu Deus wrote:
> Good time of the day, Craig.
> 
> 
> You wrote:
> 
> > I am running Debian Wheezy, and have installed kvm. When I list my
> > iptables rules there are a set of default rules defined, and
> > forwarding is set up for my virtual network. For the life of me I can
> > not figure out where these rules are defined, and I would like to
> > make some changes that I want to be permanent. Would anyone mind
> > enlightening me as where I can find the source of those rules?
> > 
> > 
> > grep -RIil iptables /etc/* returns nothing.
> 
> If You want to set Your own rules, You can write it to a file where You
> want to hold it, then You can put a script w/ execution bit set in
> 
> /etc/network/if-pre-up.d
> 
> that will read those files.
> 
> As soon as the interface comes up, Your rules will come up too (in case
> it is correct - otherwise the defaults will be used).
> 
I haven't had very good luck putting iptables rules in
/etc/network/if-pre-up.d while using network-manager.  Last I read,
there's a bug/feature in network-manager that ignores if-pre-up.d.
Instead, I have to use the iptables-persistent package.

-Rob