summaryrefslogtreecommitdiff
path: root/kvmd/apps/otgnet/__init__.py
diff options
context:
space:
mode:
authorMaxim Devaev <[email protected]>2023-03-26 01:24:26 +0200
committerMaxim Devaev <[email protected]>2023-03-26 01:24:26 +0200
commitf6283e1197511e134a4d9831999f7b54d1c5c672 (patch)
treeea2d7ef6815cc738f68e3d85abd705ab15600a20 /kvmd/apps/otgnet/__init__.py
parent2cd2fa87228bdd2c325513358df6bceaff790f92 (diff)
pikvm/pikvm#957: Added ESTABLISHED,RELATED rule to otgnet
Diffstat (limited to 'kvmd/apps/otgnet/__init__.py')
-rw-r--r--kvmd/apps/otgnet/__init__.py2
1 files changed, 2 insertions, 0 deletions
diff --git a/kvmd/apps/otgnet/__init__.py b/kvmd/apps/otgnet/__init__.py
index a3d69216..b3bfd9a4 100644
--- a/kvmd/apps/otgnet/__init__.py
+++ b/kvmd/apps/otgnet/__init__.py
@@ -39,6 +39,7 @@ from .. import init
from .netctl import BaseCtl
from .netctl import IfaceUpCtl
from .netctl import IfaceAddIpCtl
+from .netctl import IptablesAllowEstRelCtl
from .netctl import IptablesDropAllCtl
from .netctl import IptablesAllowIcmpCtl
from .netctl import IptablesAllowPortCtl
@@ -101,6 +102,7 @@ class _Service: # pylint: disable=too-many-instance-attributes
ctls: list[BaseCtl] = [
CustomCtl(self.__pre_start_cmd, self.__post_stop_cmd, placeholders),
IfaceUpCtl(self.__ip_cmd, netcfg.iface),
+ IptablesAllowEstRelCtl(self.__iptables_cmd, netcfg.iface),
*([IptablesAllowIcmpCtl(self.__iptables_cmd, netcfg.iface)] if self.__allow_icmp else []),
*[
IptablesAllowPortCtl(self.__iptables_cmd, netcfg.iface, port, tcp)