From bb9d9042f0e787d5ac9a55fb56677a422ddd1d2c Mon Sep 17 00:00:00 2001 From: ssongliu <73214554+ssongliu@users.noreply.github.com> Date: Mon, 1 Dec 2025 22:20:17 +0800 Subject: [PATCH] chore: Modify iptables initialization logic (#11145) --- agent/init/firewall/firewall.go | 9 ++------- 1 file changed, 2 insertions(+), 7 deletions(-) diff --git a/agent/init/firewall/firewall.go b/agent/init/firewall/firewall.go index 78181c7bb..5be271a77 100644 --- a/agent/init/firewall/firewall.go +++ b/agent/init/firewall/firewall.go @@ -50,14 +50,9 @@ func Init() { } } - if clientName == "ufw" { - _ = iptables.UnbindChain(iptables.FilterTab, iptables.ChainInput, iptables.Chain1PanelBasicAfter) - _ = iptables.UnbindChain(iptables.FilterTab, iptables.ChainInput, iptables.Chain1PanelBasicBefore) - _ = iptables.UnbindChain(iptables.FilterTab, iptables.ChainInput, iptables.Chain1PanelBasic) - _ = iptables.UnbindChain(iptables.FilterTab, iptables.ChainInput, iptables.Chain1PanelInput) - _ = iptables.UnbindChain(iptables.FilterTab, iptables.ChainOutput, iptables.Chain1PanelOutput) + if clientName != "iptables" { + return } - if err := iptables.LoadRulesFromFile(iptables.FilterTab, iptables.Chain1PanelBasicBefore, iptables.BasicBeforeFileName); err != nil { global.LOG.Errorf("load basic before rules from file failed, err: %v", err) return