Pass -n to ip(6)tables

to avoid long timeouts waiting for DNS servers

diff --git a/src/nwfilter/nwfilter_ebiptables_driver.c b/src/nwfilter/nwfilter_ebiptables_driver.c
index bcbefa70326aadb21263ae6d99e2e2e6dfadc9b5..e831eb3d096c3ad311d9f054c9b2a543d10b5d1d 100644 (file)
--- a/src/nwfilter/nwfilter_ebiptables_driver.c
+++ b/src/nwfilter/nwfilter_ebiptables_driver.c
@@ -655,7 +655,7 @@ iptablesSetupVirtInPost(const char *iptables_cmd,
 {
     const char *match = MATCH_PHYSDEV_IN;
     virBufferVSprintf(buf,
-                      "res=$(%s -L " VIRT_IN_POST_CHAIN
+                      "res=$(%s -n -L " VIRT_IN_POST_CHAIN
                       " | grep \"\\%s %s\")\n"
                       "if [ \"${res}\" == \"\" ]; then "
                         CMD_DEF("%s"
@@ -3662,7 +3662,7 @@ ebiptablesDriverInit(void)
     iptables_cmd_path = virFindFileInPath("iptables");
     if (iptables_cmd_path) {
         virBufferVSprintf(&buf,
-                          CMD_DEF("%s -L FORWARD") CMD_SEPARATOR
+                          CMD_DEF("%s -n -L FORWARD") CMD_SEPARATOR
                           CMD_EXEC
                           "%s",
                           iptables_cmd_path,
@@ -3675,7 +3675,7 @@ ebiptablesDriverInit(void)
     ip6tables_cmd_path = virFindFileInPath("ip6tables");
     if (ip6tables_cmd_path) {
         virBufferVSprintf(&buf,
-                          CMD_DEF("%s -L FORWARD") CMD_SEPARATOR
+                          CMD_DEF("%s -n -L FORWARD") CMD_SEPARATOR
                           CMD_EXEC
                           "%s",
                           ip6tables_cmd_path,