[Pkg-libvirt-maintainers] Bug#931955: Shutting down virtual network doesn't remove all iptables rules
    etr at firemail.cc 
    etr at firemail.cc
       
    Fri Jul 12 23:03:35 BST 2019
    
    
  
Package: libvirt
Version: 5.0.0-4
After starting the default virtual network and then shutting down "-A 
FORWARD -i virbr0 -j REJECT --reject-with icmp-port-unreachable" remains 
in iptables rules. Each time you start and stop the service it adds 
another line of the same rule.
example:
net-start default
net-destroy default
iptables -S
"-A FORWARD -i virbr0 -j REJECT --reject-with icmp-port-unreachable" 
will remain in your iptables rules. Starting  an stopping the virtual 
network multiple times will continue to add more lines of the same rule
    
    
More information about the Pkg-libvirt-maintainers
mailing list