diff --git a/systemvm/debian/opt/cloud/bin/configure.py b/systemvm/debian/opt/cloud/bin/configure.py index 2e2fbece5f14..fc846af5b9d1 100755 --- a/systemvm/debian/opt/cloud/bin/configure.py +++ b/systemvm/debian/opt/cloud/bin/configure.py @@ -918,15 +918,6 @@ def forward_vpc(self, rule): if not rule["internal_ports"] == "any": fw_prerout_rule += ":" + self.portsToString(rule["internal_ports"], "-") - fw_postrout_rule = "-A POSTROUTING -d %s/32 " % rule["public_ip"] - if not rule["protocol"] == "any": - fw_postrout_rule += " -m %s -p %s" % (rule["protocol"], rule["protocol"]) - if not rule["public_ports"] == "any": - fw_postrout_rule += " --dport %s" % self.portsToString(rule["public_ports"], ":") - fw_postrout_rule += " -j SNAT --to-source %s" % rule["internal_ip"] - if not rule["internal_ports"] == "any": - fw_postrout_rule += ":" + self.portsToString(rule["internal_ports"], "-") - fw_output_rule = "-A OUTPUT -d %s/32" % rule["public_ip"] if not rule["protocol"] == "any": fw_output_rule += " -m %s -p %s" % (rule["protocol"], rule["protocol"]) @@ -948,7 +939,6 @@ def forward_vpc(self, rule): ) self.fw.append(["nat", "", fw_prerout_rule]) - self.fw.append(["nat", "", fw_postrout_rule]) self.fw.append(["nat", "", fw_postrout_rule2]) self.fw.append(["nat", "", fw_output_rule]) diff --git a/systemvm/debian/root/health_checks/iptables_check.py b/systemvm/debian/root/health_checks/iptables_check.py index 2f3dc5026723..d80f05b99078 100644 --- a/systemvm/debian/root/health_checks/iptables_check.py +++ b/systemvm/debian/root/health_checks/iptables_check.py @@ -36,8 +36,7 @@ def main(): srcPortText = "--dport " + formatPort(portForward["sourcePortStart"], portForward["sourcePortEnd"], ":") dstText = destIp + ":" + formatPort(portForward["destPortStart"], portForward["destPortEnd"], "-") for algo in [["PREROUTING", "--to-destination"], - ["OUTPUT", "--to-destination"], - ["POSTROUTING", "--to-source"]]: + ["OUTPUT", "--to-destination"]]: entriesExpected.append([algo[0], srcIpText, srcPortText, algo[1] + " " + dstText]) fetchIpTableEntriesCmd = "iptables-save | grep " + destIp