Re: [atomic-devel] Atomic ISO has bad default IPtables

[Jonathan Lebon <jlebon redhat com>]

----- Original Message -----
> Folks,
> 
> Bringing this to atomic-devel because I'm not sure that it isn't an
> issue with centos Atomic ISOs as well.  Also, I'm not quite sure where
> the rule is coming from.

They come from the iptables package itself:

http://pkgs.fedoraproject.org/cgit/rpms/iptables.git/tree/sysconfig_iptables

> Where's the best place to fix this?

This normally shouldn't be an issue since e.g. the
k8/contrib ansible playbooks insert rules at the top. That
said, if you're encountering issues, it might mean that
we're missing a few rules. I would file an issue there with
more details probably.