<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 2013年01月09日 21:58, Joe Warren-Meeks
wrote:<br>
</div>
<blockquote
cite="mid:CABdqt2+JS6GbZbQxrO8d-P0envGHBDig3aGrbKqSUniCTQU9Wg@mail.gmail.com"
type="cite">
<div dir="ltr">Hi guys,
<div><br>
</div>
<div>I've managed to disable NAT by deleting the correct rule.
This means all my instances are properly routable no, which is
exactly what I want.</div>
<div><br>
</div>
<div style="">To do this, I'm using </div>
<div style=""><br>
</div>
<div style="">iptables -vnL -t nat --line-numbers </div>
<div style=""><br>
</div>
<div style="">to get the rule number from the nova-network-snat
chain and deleting it using:</div>
<div style=""><br>
</div>
<div style="">
iptables -t nat -D nova-network-snat <num><br>
</div>
<div style=""><br>
</div>
<div style="">My question is when and where are those snat rules
created, so that I can prevent them from being setup in the
first place.</div>
<div style="">
<br>
</div>
<div style="">Kind regards</div>
<div style=""><br>
</div>
<div style=""> -- joe.</div>
<div style=""><br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Mailing list: <a class="moz-txt-link-freetext" href="https://launchpad.net/~openstack">https://launchpad.net/~openstack</a>
Post to : <a class="moz-txt-link-abbreviated" href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a>
Unsubscribe : <a class="moz-txt-link-freetext" href="https://launchpad.net/~openstack">https://launchpad.net/~openstack</a>
More help : <a class="moz-txt-link-freetext" href="https://help.launchpad.net/ListHelp">https://help.launchpad.net/ListHelp</a>
</pre>
</blockquote>
1. delete all floating ips<br>
allocate a floating ip to instance will create a SNAT rule and
2 DNAT rules. <br>
2. iptables -t nat -I nova-network-float-snat -j RETURN<br>
avoid the shared SNAT rule<br>
<br>
<pre class="moz-signature" cols="72">--
Jian Wen
Software Engineer, Services and Support Team
Canonical, Ltd</pre>
</body>
</html>