diff --git a/templates/iptables-rules.v4.j2 b/templates/iptables-rules.v4.j2 index af45756..bee0973 100644 --- a/templates/iptables-rules.v4.j2 +++ b/templates/iptables-rules.v4.j2 @@ -202,10 +202,20 @@ {% if jgroups_cluster_enabled %} # infinispan/jgroups +{% if jgroups_sources is defined %} +{% for s in jgroups_sources %} +-A INPUT -s {{ s }} -m pkttype --pkt-type multicast -d {{ jgroups_multicast_addr }} -j ACCEPT +-A INPUT -s {{ jgroups_multicast_addr }} -m pkttype --pkt-type multicast -d {{ jgroups_multicast_addr }} -j ACCEPT +{% if jgroups_mping_multicast_addr is defined and jgroups_mping_multicast_addr != jgroups_multicast_addr %} +-A INPUT -s {{ s }} -m pkttype --pkt-type multicast -d {{ jgroups_mping_multicast_addr }} -j ACCEPT +{% endif %} +{% endfor %} +{% else %} -A INPUT -m pkttype --pkt-type multicast -d {{ jgroups_multicast_addr }} -j ACCEPT {% if jgroups_mping_multicast_addr is defined and jgroups_mping_multicast_addr != jgroups_multicast_addr %} -A INPUT -m pkttype --pkt-type multicast -d {{ jgroups_mping_multicast_addr }} -j ACCEPT {% endif %} +{% endif %} {% if jgroups_sources is defined %} {% for s in jgroups_sources %} -A INPUT -s {{ s }} -m state --state NEW -p tcp -m tcp --dport {{ jgroups_multicast_port }} -j ACCEPT