If osload part of swapin fails and there is a firewall involved, it is likely

that the firewall rules are preventing essential communication and causing the
failure, so don't retry.

We should probably only do this if the user has specified additional
firewall rules.  But right now, I may screw up the default rules too!

tbsetup/tbswap.in

@@ -906,6 +906,20 @@ sub doSwapin($) {
 	undef $os_setup_pid; # Make sure doswapout() doesn't wait for it.
 	if ($CHILD_ERROR) {
 	    print STDERR "*** Failed to reset OS and reboot nodes.\n";
+	    #
+	    # If there is a firewall involved, it could be that the
+	    # firewall rules are preventing essential communication,
+	    # so don't retry.
+	    #
+	    # XXX should only do this if the user has specified additional
+	    # rules.  But right now, I may screw up too!
+	    #
+	    if ($firewalled) {
+		print STDERR "Not retrying, ".
+		    "firewall may be preventing setup.\n";
+		return 1;
+	    }
+
 	    #
 	    # Use returncode from os_setup process to
 	    # set global $retry flag, indicating to caller