[cloudstack] branch 4.14 updated: FIX issue in VR if remote access vpn is enabled (#4430)

[da...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

dahn pushed a commit to branch 4.14
in repository https://gitbox.apache.org/repos/asf/cloudstack.git


The following commit(s) were added to refs/heads/4.14 by this push:
     new 3414656  FIX issue in VR if remote access vpn is enabled (#4430)
3414656 is described below

commit 34146569d993720c5462537234efc9b4ac4a7ce2
Author: Rakesh <ra...@gmail.com>
AuthorDate: Wed Nov 4 09:27:48 2020 +0100

    FIX issue in VR if remote access vpn is enabled (#4430)
    
    Co-authored-by: Rakesh Venkatesh <r....@global.leaseweb.com>
---
 systemvm/debian/opt/cloud/bin/configure.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/systemvm/debian/opt/cloud/bin/configure.py b/systemvm/debian/opt/cloud/bin/configure.py
index fc846af..5d60fab 100755
--- a/systemvm/debian/opt/cloud/bin/configure.py
+++ b/systemvm/debian/opt/cloud/bin/configure.py
@@ -755,7 +755,7 @@ class CsRemoteAccessVpn(CsDataBag):
 
         self.fw.append(["", "", "-A INPUT -i ppp+ -m udp -p udp --dport 53 -j ACCEPT"])
         self.fw.append(["", "", "-A INPUT -i ppp+ -m tcp -p tcp --dport 53 -j ACCEPT"])
-        self.fw.append(["nat", "", "-I PREROUTING -i ppp+ -m tcp --dport 53 -j DNAT --to-destination %s" % local_ip])
+        self.fw.append(["nat", "", "-I PREROUTING -i ppp+ -p tcp -m tcp --dport 53 -j DNAT --to-destination %s" % local_ip])
 
         if self.config.is_vpc():
             return