[cloudstack] branch 4.16 updated: VR: Do not add iptables rules for the revoked ip addresses (#6189)

[nvazquez]

This is an automated email from the ASF dual-hosted git repository.

nvazquez pushed a commit to branch 4.16
in repository https://gitbox.apache.org/repos/asf/cloudstack.git


The following commit(s) were added to refs/heads/4.16 by this push:
     new c61ea9f96d VR: Do not add iptables rules for the revoked ip addresses 
(#6189)
c61ea9f96d is described below

commit c61ea9f96d23ca885138ad5ccea09af62489b373
Author: Wei Zhou <weiz...@apache.org>
AuthorDate: Wed Apr 6 05:16:47 2022 +0200

    VR: Do not add iptables rules for the revoked ip addresses (#6189)
---
 systemvm/debian/opt/cloud/bin/cs/CsAddress.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/systemvm/debian/opt/cloud/bin/cs/CsAddress.py 
b/systemvm/debian/opt/cloud/bin/cs/CsAddress.py
index 0bc5d44ac5..afc1107a61 100755
--- a/systemvm/debian/opt/cloud/bin/cs/CsAddress.py
+++ b/systemvm/debian/opt/cloud/bin/cs/CsAddress.py
@@ -498,7 +498,7 @@ class CsIP:
                     if not inf.startswith("eth"):
                         continue
                     for address in addresses:
-                        if "nw_type" in address and address["nw_type"] == 
"guest":
+                        if "nw_type" in address and address["nw_type"] == 
"guest" and address["add"]:
                             self.fw.append(["filter", "front", "-A FORWARD -s 
%s -d %s -j ACL_INBOUND_%s" %
                                             (address["network"], 
self.address["network"], self.dev)])
                             self.fw.append(["filter", "front", "-A FORWARD -s 
%s -d %s -j ACL_INBOUND_%s" %