Iptables setting rules in the openstack computing node

Open Virtual Machine vnc port, dns, bootps and other ports. Create the chain and rules required for the nova-compute and nova-network. manually add and create virtual machines with the same effect. Iptables-IINPUT1-ptcp-mmultiport -- dport5900: 6200,53-jACCEPTiptables-IINPUT1-pudp-m Open Virtual Machine vnc port, dns, bootps and other ports. Create the chain and rules required for the nova-compute and nova-network. manually add and create virtual machines with the same effect.

Iptables-I INPUT 1-p tcp-m multiport -- dport 5900: 6200,53-j ACCEPT
Iptables-I INPUT 1-p udp-m multiport -- dport 53,67-j ACCEPT
Iptables-t filter-N nova-compute-FORWARD
Iptables-t filter-N nova-compute-INPUT
Iptables-t filter-N nova-compute-OUTPUT
Iptables-t filter-N nova-compute-inst
Iptables-t filter-N nova-compute-local
Iptables-t filter-N nova-compute-provider
Iptables-t filter-N nova-compute-sg-fallback
Iptables-t filter-a input-j nova-compute-INPUT
Iptables-t filter-a forward-j nova-compute-FORWARD
Iptables-t filter-a output-j nova-compute-OUTPUT
Iptables-t filter-A nova-compute-sg-fallback-j DROP
Iptables-t filter-A nova-filter-top-j nova-compute-local
Iptables-t filter-A nova-network-FORWARD-I br100-j ACCEPT
Iptables-t filter-A nova-network-FORWARD-o br100-j ACCEPT
Iptables-t filter-A nova-network-INPUT-I br100-p udp-m udp -- dport 67-j ACCEPT
Iptables-t filter-A nova-network-INPUT-I br100-p tcp-m tcp -- dport 67-j ACCEPT
Iptables-t filter-A nova-network-INPUT-I br100-p udp-m udp -- dport 53-j ACCEPT
Iptables-t filter-A nova-network-INPUT-I br100-p tcp-m tcp -- dport 53-j ACCEPT
Iptables-t nat-N nova-compute-OUTPUT
Iptables-t nat-N nova-compute-POSTROUTING
Iptables-t nat-N nova-compute-PREROUTING
Iptables-t nat-N nova-compute-float-snat
Iptables-t nat-N nova-compute-snat
Iptables-t nat-a prerouting-j nova-compute-PREROUTING
Iptables-t nat-a postrouting-j nova-compute-POSTROUTING
Iptables-t nat-a output-j nova-compute-OUTPUT
Iptables-t nat-A nova-compute-snat-j nova-compute-float-snat
Iptables-t nat-A nova-postrouting-bottom-j nova-compute-snat

/Etc/init. d/iptables save