This is an automated email from the ASF dual-hosted git repository.

bhaisaab pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/cloudstack.git


The following commit(s) were added to refs/heads/master by this push:
     new 8832758  CLOUDSTACK-10152: Skip the destination cidr in ipset when 
0.0.0.0/0 pa… (#2334)
8832758 is described below

commit 88327580b08e2abec2d3c817ab0336e394563cd6
Author: Jayapal <jayapalati...@gmail.com>
AuthorDate: Thu Nov 23 11:42:43 2017 +0530

    CLOUDSTACK-10152: Skip the destination cidr in ipset when 0.0.0.0/0 pa… 
(#2334)
    
    Skip the destination cidr in ipset when 0.0.0.0/0 passed.
    Fixed adding issue with egress dest cidr with 0.0.0.0/0.
---
 systemvm/patches/debian/config/opt/cloud/bin/configure.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/systemvm/patches/debian/config/opt/cloud/bin/configure.py 
b/systemvm/patches/debian/config/opt/cloud/bin/configure.py
index f111309..bc5349a 100755
--- a/systemvm/patches/debian/config/opt/cloud/bin/configure.py
+++ b/systemvm/patches/debian/config/opt/cloud/bin/configure.py
@@ -120,6 +120,7 @@ class CsAcl(CsDataBag):
             self.add_rule()
 
         def add_rule(self):
+            CIDR_ALL = '0.0.0.0/0'
             icmp_type = ''
             rule = self.rule
             icmp_type = "any"
@@ -172,6 +173,8 @@ class CsAcl(CsDataBag):
 
                 logging.debug("egress   rule  ####==> %s", self.rule)
                 for cidr in self.rule['dcidr']:
+                    if cidr == CIDR_ALL:
+                        continue
                     ipsetAddCmd = 'ipset add '+ destIpsetName + ' '+cidr
                     CsHelper.execute(ipsetAddCmd)
                     dflag = True

-- 
To stop receiving notification emails like this one, please contact
['"commits@cloudstack.apache.org" <commits@cloudstack.apache.org>'].

Reply via email to