[jira] [Created] (CLOUDSTACK-8650) When using security groups, adding in ingress rule for protocol "all" for source cidr 0.0.0.0/0 is impossible

Fri, 17 Jul 2015 08:22:17 -0700 

Frank Louwers created CLOUDSTACK-8650:
-----------------------------------------

             Summary: When using security groups, adding in ingress rule for 
protocol "all" for source cidr 0.0.0.0/0 is impossible
                 Key: CLOUDSTACK-8650
                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-8650
             Project: CloudStack
          Issue Type: Bug
      Security Level: Public (Anyone can view this level - this is the default.)
            Reporter: Frank Louwers
            Priority: Minor


While it is possible to add ingress rules for tcp, udp and icmp for source 
range 0.0.0.0/0, it is currently impossible to add a rule for protocol all for 
source range 0.0.0.0/0.

So these work (using eg cloudmonkey):

  * authorize securitygroupingress securitygroupid=$id cidrlist="0.0.0.0/0" 
protocol=tcp
  * authorize securitygroupingress securitygroupid=$id cidrlist="0.0.0.0/0" 
protocol=icmp
  * authorize securitygroupingress securitygroupid=$id cidrlist="0.0.0.0/1" 
protocol=all
  * authorize securitygroupingress securitygroupid=$id cidrlist="128.0.0.0/1" 
protocol=all

But this doesn't work:

  * authorize securitygroupingress securitygroupid=$id cidrlist="0.0.0.0/0" 
protocol=all


Fix is in https://github.com/apache/cloudstack/pull/601



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to