bradh352 opened a new issue, #12668:
URL: https://github.com/apache/cloudstack/issues/12668

   ### problem
   
   If you have a CIDR list like:
   
   rule 1: [ "1.2.3.4/32", "2.3.4.5/32"] tcp allow port 22
   rule 65535: [ "0.0.0.0/0"] deny port any
   
   What you end up with when inspecting the VR is:
   
   ```
   -A ACL_OUTBOUND_eth12 -d 1.2.3.4/32 -p tcp -m tcp --dport 22 -j ACCEPT
   -A ACL_OUTBOUND_eth12 -j DROP
   -A ACL_OUTBOUND_eth12 -d 2.3.4.5/32 -p tcp -m tcp --dport 22 -j ACCEPT
   ```
   
   This is clearly not the desired behavior.
   
   ### versions
   
   Cloudstack 4.22.0
   
   ### The steps to reproduce the bug
   
   See description
   
   
   ### What to do about it?
   
   Don't use more than one CIDR per rule


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to