Firewalld: remove masquerade (#1297)

kontena · Apr 16, 2019 · 15b7257 · 15b7257
1 parent 6400551
commit 15b7257
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/lib/pharos/scripts/configure-firewalld.sh b/lib/pharos/scripts/configure-firewalld.sh
@@ -16,7 +16,9 @@ fi
 
 firewall-cmd --permanent --add-service pharos-worker
 firewall-cmd --permanent --add-source ipset:pharos --zone trusted
-firewall-cmd --add-masquerade --permanent
+if firewall-cmd --query-masquerade > /dev/null 2>&1 ; then
+    firewall-cmd --remove-masquerade --permanent
+fi
 
 if [[ "${RELOAD}" = "true" ]]; then
     firewall-cmd --reload