openstack team mailing list archive

[Brian Haley <brian.haley@xxxxxx>]

On 06/01/2013 10:45 AM, Martin Mailand wrote:
> Hi List,
> 
> if I add my routers gateway to an external network, I get an error in
> the l3-agent.log, about a failure in iptables-restore.
> As far as I know iptables-restore gets the information on stdin, how
> could I see the iptable rules which do not apply?
> How could I debug this further?

Have seen this in testing myself, not sure there's an easy solution besides
modifying the code to print the resultant filter after it's been modified,
something like this in the iptables_manager _apply() code:

     new_filter = self._modify_rules(current_lines,
                                     tables[table])
+    for f in enumerate(new_filter):
+        print f
     args = ['%s-restore' % (cmd)]

You'll get a lot of extra output in the logs but should be able to find the bad
line.

-Brian