#Locad ipset before iptables install

Arno's firewall - Secure firewall for both single and multi-homed machines.The iptables package is an indirect dependency of the base meta package, so it should be installed on your system by default.

#Locad ipset before iptables install

You will only need to install the userland utilities, which are provided by the package iptables. The stock Arch Linux kernel is compiled with iptables support. A INPUT -p tcp -s : iptables is a legacy framework, nftables aims to provide a modern replacement including a compatibility layer. A INPUT -p udp -s 10.204.0.1 -m comment -comment 'OMI Pod VLAN 8 management' -j ACCEPT A INPUT -p tcp -s 10.204.0.1 -m comment -comment 'OMI Pod VLAN 8 management' -j ACCEPT A INPUT -i o-hm0 -j ACCEPT -m comment -comment 'Octavia management' A INPUT -i bond0.333 -j ACCEPT -m comment -comment 'Local VLAN - tunnel' A INPUT -i bond0.332 -j ACCEPT -m comment -comment 'Local VLAN - storage' A INPUT -i bond0.306 -j ACCEPT -m comment -comment 'Local VLAN - control' A INPUT -i bond0.304 -j ACCEPT -m comment -comment 'Local VLAN - compute' A INPUT -m state -state RELATED,ESTABLISHED -j ACCEPT -m comment -comment 'connection tracking' A INPUT -p icmp -j ACCEPT -m comment -comment 'allow icmp' A OUTPUT -j DROP -m set -match-set blacklist dst -m comment -comment 'blacklist' A INPUT -j DROP -m set -match-set blacklist src -m comment -comment 'blacklist' A OUTPUT -j ACCEPT -m pkttype -pkt-type broadcast -m comment -comment 'broadcast' A INPUT -j ACCEPT -m pkttype -pkt-type broadcast -m comment -comment 'broadcast' A OUTPUT -j ACCEPT -m pkttype -pkt-type multicast -m comment -comment 'multicast' A INPUT -j ACCEPT -m pkttype -pkt-type multicast -m comment -comment 'multicast' A OUTPUT -o lo -j ACCEPT -m comment -comment 'localhost' A INPUT -i lo -j ACCEPT -m comment -comment 'localhost' Upbeat-peacock : ok=33 changed=5 unreachable=0 failed=0 skipped=18 rescued=0 ignored=0 Localhost : ok=4 changed=2 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 Gifted-wildcat : ok=43 changed=6 unreachable=0 failed=0 skipped=19 rescued=0 ignored=0 : Could not match supplied host pattern, ignoring: enable_nova_True : Invalid characters were found in group names but not replaced, use -vvvv to see details

Reconfigure OpenStack service : ansible-playbook -i /etc/fm-deploy/kolla-ansible-inventory -e -e -e CONFIG_DIR=/etc/kolla -tags neutron,openvswitch -e kolla_action=reconfigure -e kolla_serial=0 /opt/kolla-ansible/.kolla-admin/share/kolla-ansible/ansible/site.yml (.kolla-admin) kolla-ansible]# kolla-ansible -i /etc/fm-deploy/kolla-ansible-inventory reconfigure -tags neutron,openvswitch