[jira] [Commented] (CLOUDSTACK-10282) SystemVM - filrewall rules incorrect
[ https://issues.apache.org/jira/browse/CLOUDSTACK-10282?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16365302#comment-16365302 ] ASF subversion and git services commented on CLOUDSTACK-10282: -- Commit 97441a82f96ae4f30fcd866a63e63c64a71ff04b in cloudstack's branch refs/heads/master from [~marcaurele] [ https://gitbox.apache.org/repos/asf?p=cloudstack.git;h=97441a8 ] CLOUDSTACK-10282: ipv6 firewall rules operation should be done with ip6tables (#2450) For ipv6 firewall rules operation should be done with ip6tables. > SystemVM - filrewall rules incorrect > > > Key: CLOUDSTACK-10282 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10282 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: SystemVM >Reporter: Marc-Aurèle Brothier >Priority: Major > > The current state of the firewall on the systemVMs let all packets come in > due to the overwrite of the ipv6 rules on the ipv4. -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (CLOUDSTACK-10282) SystemVM - filrewall rules incorrect
[ https://issues.apache.org/jira/browse/CLOUDSTACK-10282?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16365267#comment-16365267 ] ASF subversion and git services commented on CLOUDSTACK-10282: -- Commit 97441a82f96ae4f30fcd866a63e63c64a71ff04b in cloudstack's branch refs/heads/4.11 from [~marcaurele] [ https://gitbox.apache.org/repos/asf?p=cloudstack.git;h=97441a8 ] CLOUDSTACK-10282: ipv6 firewall rules operation should be done with ip6tables (#2450) For ipv6 firewall rules operation should be done with ip6tables. > SystemVM - filrewall rules incorrect > > > Key: CLOUDSTACK-10282 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10282 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: SystemVM >Reporter: Marc-Aurèle Brothier >Priority: Major > > The current state of the firewall on the systemVMs let all packets come in > due to the overwrite of the ipv6 rules on the ipv4. -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (CLOUDSTACK-10282) SystemVM - filrewall rules incorrect
[ https://issues.apache.org/jira/browse/CLOUDSTACK-10282?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16365265#comment-16365265 ] ASF GitHub Bot commented on CLOUDSTACK-10282: - rhtyd closed pull request #2450: CLOUDSTACK-10282: firewall rules operation should be done with ip6tab… URL: https://github.com/apache/cloudstack/pull/2450 This is a PR merged from a forked repository. As GitHub hides the original diff on merge, it is displayed below for the sake of provenance: As this is a foreign pull request (from a fork), the diff is supplied below (as it won't show otherwise due to GitHub magic): diff --git a/systemvm/debian/opt/cloud/bin/setup/postinit.sh b/systemvm/debian/opt/cloud/bin/setup/postinit.sh index d29203f71c2..9da5c7a75fa 100755 --- a/systemvm/debian/opt/cloud/bin/setup/postinit.sh +++ b/systemvm/debian/opt/cloud/bin/setup/postinit.sh @@ -78,7 +78,7 @@ fi ipv6="/etc/iptables/rules.v6" if [ -e $ipv6 ] then - iptables-restore < $ipv6 + ip6tables-restore < $ipv6 fi date > /var/cache/cloud/boot_up_done This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org > SystemVM - filrewall rules incorrect > > > Key: CLOUDSTACK-10282 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10282 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: SystemVM >Reporter: Marc-Aurèle Brothier >Priority: Major > > The current state of the firewall on the systemVMs let all packets come in > due to the overwrite of the ipv6 rules on the ipv4. -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (CLOUDSTACK-10282) SystemVM - filrewall rules incorrect
[ https://issues.apache.org/jira/browse/CLOUDSTACK-10282?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16365264#comment-16365264 ] ASF GitHub Bot commented on CLOUDSTACK-10282: - rhtyd commented on issue #2450: CLOUDSTACK-10282: firewall rules operation should be done with ip6tab… URL: https://github.com/apache/cloudstack/pull/2450#issuecomment-365865641 LGTM, merging. This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org > SystemVM - filrewall rules incorrect > > > Key: CLOUDSTACK-10282 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10282 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: SystemVM >Reporter: Marc-Aurèle Brothier >Priority: Major > > The current state of the firewall on the systemVMs let all packets come in > due to the overwrite of the ipv6 rules on the ipv4. -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (CLOUDSTACK-10282) SystemVM - filrewall rules incorrect
[ https://issues.apache.org/jira/browse/CLOUDSTACK-10282?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16365043#comment-16365043 ] ASF GitHub Bot commented on CLOUDSTACK-10282: - blueorangutan commented on issue #2450: CLOUDSTACK-10282: firewall rules operation should be done with ip6tab… URL: https://github.com/apache/cloudstack/pull/2450#issuecomment-365801657 Trillian test result (tid-2260) Environment: kvm-centos7 (x2), Advanced Networking with Mgmt server 7 Total time taken: 32230 seconds Marvin logs: https://github.com/blueorangutan/acs-prs/releases/download/trillian/pr2450-t2260-kvm-centos7.zip Intermitten failure detected: /marvin/tests/smoke/test_privategw_acl.py Intermitten failure detected: /marvin/tests/smoke/test_vpc_redundant.py Intermitten failure detected: /marvin/tests/smoke/test_hostha_kvm.py Smoke tests completed. 66 look OK, 1 have error(s) Only failed tests results shown below: Test | Result | Time (s) | Test File --- | --- | --- | --- test_hostha_enable_ha_when_host_in_maintenance | `Error` | 3.82 | test_hostha_kvm.py This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org > SystemVM - filrewall rules incorrect > > > Key: CLOUDSTACK-10282 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10282 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: SystemVM >Reporter: Marc-Aurèle Brothier >Priority: Major > > The current state of the firewall on the systemVMs let all packets come in > due to the overwrite of the ipv6 rules on the ipv4. -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (CLOUDSTACK-10282) SystemVM - filrewall rules incorrect
[ https://issues.apache.org/jira/browse/CLOUDSTACK-10282?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16364344#comment-16364344 ] ASF GitHub Bot commented on CLOUDSTACK-10282: - blueorangutan commented on issue #2450: CLOUDSTACK-10282: firewall rules operation should be done with ip6tab… URL: https://github.com/apache/cloudstack/pull/2450#issuecomment-365656738 @rhtyd a Trillian-Jenkins test job (centos7 mgmt + kvm-centos7) has been kicked to run smoke tests This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org > SystemVM - filrewall rules incorrect > > > Key: CLOUDSTACK-10282 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10282 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: SystemVM >Reporter: Marc-Aurèle Brothier >Priority: Major > > The current state of the firewall on the systemVMs let all packets come in > due to the overwrite of the ipv6 rules on the ipv4. -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (CLOUDSTACK-10282) SystemVM - filrewall rules incorrect
[ https://issues.apache.org/jira/browse/CLOUDSTACK-10282?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16364343#comment-16364343 ] ASF GitHub Bot commented on CLOUDSTACK-10282: - rhtyd commented on issue #2450: CLOUDSTACK-10282: firewall rules operation should be done with ip6tab… URL: https://github.com/apache/cloudstack/pull/2450#issuecomment-365656365 That's alot of error, I'll rekick tests. @blueorangutan test This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org > SystemVM - filrewall rules incorrect > > > Key: CLOUDSTACK-10282 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10282 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: SystemVM >Reporter: Marc-Aurèle Brothier >Priority: Major > > The current state of the firewall on the systemVMs let all packets come in > due to the overwrite of the ipv6 rules on the ipv4. -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (CLOUDSTACK-10282) SystemVM - filrewall rules incorrect
[ https://issues.apache.org/jira/browse/CLOUDSTACK-10282?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16364230#comment-16364230 ] ASF GitHub Bot commented on CLOUDSTACK-10282: - blueorangutan commented on issue #2450: CLOUDSTACK-10282: firewall rules operation should be done with ip6tab… URL: https://github.com/apache/cloudstack/pull/2450#issuecomment-365637963 Trillian test result (tid-2255) Environment: kvm-centos7 (x2), Advanced Networking with Mgmt server 7 Total time taken: 17944 seconds Marvin logs: https://github.com/blueorangutan/acs-prs/releases/download/trillian/pr2450-t2255-kvm-centos7.zip Intermitten failure detected: /marvin/tests/smoke/test_deploy_virtio_scsi_vm.py Intermitten failure detected: /marvin/tests/smoke/test_public_ip_range.py Intermitten failure detected: /marvin/tests/smoke/test_reset_vm_on_reboot.py Intermitten failure detected: /marvin/tests/smoke/test_router_dhcphosts.py Intermitten failure detected: /marvin/tests/smoke/test_router_dns.py Intermitten failure detected: /marvin/tests/smoke/test_router_dnsservice.py Intermitten failure detected: /marvin/tests/smoke/test_routers_iptables_default_policy.py Intermitten failure detected: /marvin/tests/smoke/test_routers_network_ops.py Intermitten failure detected: /marvin/tests/smoke/test_routers.py Intermitten failure detected: /marvin/tests/smoke/test_secondary_storage.py Intermitten failure detected: /marvin/tests/smoke/test_service_offerings.py Intermitten failure detected: /marvin/tests/smoke/test_snapshots.py Intermitten failure detected: /marvin/tests/smoke/test_ssvm.py Intermitten failure detected: /marvin/tests/smoke/test_templates.py Intermitten failure detected: /marvin/tests/smoke/test_usage.py Intermitten failure detected: /marvin/tests/smoke/test_vm_life_cycle.py Intermitten failure detected: /marvin/tests/smoke/test_vm_snapshots.py Intermitten failure detected: /marvin/tests/smoke/test_volumes.py Intermitten failure detected: /marvin/tests/smoke/test_vpc_redundant.py Intermitten failure detected: /marvin/tests/smoke/test_vpc_router_nics.py Intermitten failure detected: /marvin/tests/smoke/test_vpc_vpn.py Intermitten failure detected: /marvin/tests/smoke/test_host_maintenance.py Intermitten failure detected: /marvin/tests/smoke/test_hostha_kvm.py Smoke tests completed. 46 look OK, 21 have error(s) Only failed tests results shown below: Test | Result | Time (s) | Test File --- | --- | --- | --- ContextSuite context=TestResetVmOnReboot>:setup | `Error` | 0.00 | test_reset_vm_on_reboot.py ContextSuite context=TestRouterDHCPHosts>:setup | `Error` | 0.00 | test_router_dhcphosts.py ContextSuite context=TestRouterDHCPOpts>:setup | `Error` | 0.00 | test_router_dhcphosts.py ContextSuite context=TestRouterDns>:setup | `Error` | 0.00 | test_router_dns.py ContextSuite context=TestVmSnapshot>:setup | `Error` | 0.08 | test_vm_snapshots.py ContextSuite context=TestRouterDnsService>:setup | `Error` | 0.00 | test_router_dnsservice.py ContextSuite context=TestDeployVM>:setup | `Error` | 0.00 | test_vm_life_cycle.py ContextSuite context=TestVMLifeCycle>:setup | `Error` | 0.00 | test_vm_life_cycle.py ContextSuite context=TestRouterIpTablesPolicies>:setup | `Error` | 0.00 | test_routers_iptables_default_policy.py ContextSuite context=TestVPCIpTablesPolicies>:setup | `Error` | 0.00 | test_routers_iptables_default_policy.py test_01_isolate_network_FW_PF_default_routes_egress_true | `Error` | 0.19 | test_routers_network_ops.py test_02_isolate_network_FW_PF_default_routes_egress_false | `Error` | 0.23 | test_routers_network_ops.py ContextSuite context=TestRedundantIsolateNetworks>:setup | `Error` | 1.47 | test_routers_network_ops.py ContextSuite context=TestRouterServices>:setup | `Error` | 0.00 | test_routers.py test_01_sys_vm_start | `Failure` | 0.15 | test_secondary_storage.py test_02_sys_template_ready | `Failure` | 0.12 | test_secondary_storage.py ContextSuite context=TestServiceOfferings>:setup | `Error` | 0.28 | test_service_offerings.py ContextSuite context=TestSnapshotRootDisk>:setup | `Error` | 0.00 | test_snapshots.py test_01_list_sec_storage_vm | `Failure` | 0.04 | test_ssvm.py test_02_list_cpvm_vm | `Failure` | 0.05 | test_ssvm.py test_03_ssvm_internals | `Failure` | 0.04 | test_ssvm.py test_04_cpvm_internals | `Failure` | 0.05 | test_ssvm.py test_05_stop_ssvm | `Failure` | 0.06 | test_ssvm.py test_06_stop_cpvm | `Failure` | 0.04 | test_ssvm.py test_07_reboot_ssvm | `Failure` | 0.04 | test_ssvm.py test_08_reboot_cpvm | `Failure` | 0.05 | test_ssvm.py test_09_destroy_ssvm | `Failure` | 0.04 | test_ssvm.py test_10_destroy_cpvm | `Failure` | 0.04 | test_ssvm.py test_02_create_template_with_checksum_sha1 | `Error` | 65.58 | test_templates.py
[jira] [Commented] (CLOUDSTACK-10282) SystemVM - filrewall rules incorrect
[ https://issues.apache.org/jira/browse/CLOUDSTACK-10282?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16363701#comment-16363701 ] ASF GitHub Bot commented on CLOUDSTACK-10282: - blueorangutan commented on issue #2450: CLOUDSTACK-10282: firewall rules operation should be done with ip6tab… URL: https://github.com/apache/cloudstack/pull/2450#issuecomment-365549898 @rhtyd a Trillian-Jenkins test job (centos7 mgmt + kvm-centos7) has been kicked to run smoke tests This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org > SystemVM - filrewall rules incorrect > > > Key: CLOUDSTACK-10282 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10282 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: SystemVM >Reporter: Marc-Aurèle Brothier >Priority: Major > > The current state of the firewall on the systemVMs let all packets come in > due to the overwrite of the ipv6 rules on the ipv4. -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (CLOUDSTACK-10282) SystemVM - filrewall rules incorrect
[ https://issues.apache.org/jira/browse/CLOUDSTACK-10282?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16363699#comment-16363699 ] ASF GitHub Bot commented on CLOUDSTACK-10282: - rhtyd commented on issue #2450: CLOUDSTACK-10282: firewall rules operation should be done with ip6tab… URL: https://github.com/apache/cloudstack/pull/2450#issuecomment-365549778 @blueorangutan test This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org > SystemVM - filrewall rules incorrect > > > Key: CLOUDSTACK-10282 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10282 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: SystemVM >Reporter: Marc-Aurèle Brothier >Priority: Major > > The current state of the firewall on the systemVMs let all packets come in > due to the overwrite of the ipv6 rules on the ipv4. -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (CLOUDSTACK-10282) SystemVM - filrewall rules incorrect
[ https://issues.apache.org/jira/browse/CLOUDSTACK-10282?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16360581#comment-16360581 ] ASF GitHub Bot commented on CLOUDSTACK-10282: - blueorangutan commented on issue #2450: CLOUDSTACK-10282: firewall rules operation should be done with ip6tab… URL: https://github.com/apache/cloudstack/pull/2450#issuecomment-364887772 Packaging result: ✔centos6 ✔centos7 ✔debian. JID-1708 This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org > SystemVM - filrewall rules incorrect > > > Key: CLOUDSTACK-10282 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10282 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: SystemVM >Reporter: Marc-Aurèle Brothier >Priority: Major > > The current state of the firewall on the systemVMs let all packets come in > due to the overwrite of the ipv6 rules on the ipv4. -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (CLOUDSTACK-10282) SystemVM - filrewall rules incorrect
[ https://issues.apache.org/jira/browse/CLOUDSTACK-10282?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16360556#comment-16360556 ] ASF GitHub Bot commented on CLOUDSTACK-10282: - blueorangutan commented on issue #2450: CLOUDSTACK-10282: firewall rules operation should be done with ip6tab… URL: https://github.com/apache/cloudstack/pull/2450#issuecomment-364881789 @rhtyd a Jenkins job has been kicked to build packages. I'll keep you posted as I make progress. This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org > SystemVM - filrewall rules incorrect > > > Key: CLOUDSTACK-10282 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10282 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: SystemVM >Reporter: Marc-Aurèle Brothier >Priority: Major > > The current state of the firewall on the systemVMs let all packets come in > due to the overwrite of the ipv6 rules on the ipv4. -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (CLOUDSTACK-10282) SystemVM - filrewall rules incorrect
[ https://issues.apache.org/jira/browse/CLOUDSTACK-10282?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16360555#comment-16360555 ] ASF GitHub Bot commented on CLOUDSTACK-10282: - rhtyd commented on issue #2450: CLOUDSTACK-10282: firewall rules operation should be done with ip6tab… URL: https://github.com/apache/cloudstack/pull/2450#issuecomment-364881765 @blueorangutan package This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org > SystemVM - filrewall rules incorrect > > > Key: CLOUDSTACK-10282 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10282 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: SystemVM >Reporter: Marc-Aurèle Brothier >Priority: Major > > The current state of the firewall on the systemVMs let all packets come in > due to the overwrite of the ipv6 rules on the ipv4. -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (CLOUDSTACK-10282) SystemVM - filrewall rules incorrect
[ https://issues.apache.org/jira/browse/CLOUDSTACK-10282?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16360449#comment-16360449 ] ASF GitHub Bot commented on CLOUDSTACK-10282: - marcaurele commented on issue #2450: CLOUDSTACK-10282: firewall rules operation should be done with ip6tab… URL: https://github.com/apache/cloudstack/pull/2450#issuecomment-364857790 Rebased done @rhtyd This bug leaves the systemvm with all ports opened This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org > SystemVM - filrewall rules incorrect > > > Key: CLOUDSTACK-10282 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10282 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: SystemVM >Reporter: Marc-Aurèle Brothier >Priority: Major > > The current state of the firewall on the systemVMs let all packets come in > due to the overwrite of the ipv6 rules on the ipv4. -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (CLOUDSTACK-10282) SystemVM - filrewall rules incorrect
[ https://issues.apache.org/jira/browse/CLOUDSTACK-10282?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16360447#comment-16360447 ] ASF GitHub Bot commented on CLOUDSTACK-10282: - marcaurele commented on issue #2450: CLOUDSTACK-10282: firewall rules operation should be done with ip6tab… URL: https://github.com/apache/cloudstack/pull/2450#issuecomment-364857790 Rebased done @rhtyd This bug leaves the systemvm with all port opened This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org > SystemVM - filrewall rules incorrect > > > Key: CLOUDSTACK-10282 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10282 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: SystemVM >Reporter: Marc-Aurèle Brothier >Priority: Major > > The current state of the firewall on the systemVMs let all packets come in > due to the overwrite of the ipv6 rules on the ipv4. -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (CLOUDSTACK-10282) SystemVM - filrewall rules incorrect
[ https://issues.apache.org/jira/browse/CLOUDSTACK-10282?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16360441#comment-16360441 ] ASF GitHub Bot commented on CLOUDSTACK-10282: - marcaurele commented on issue #2450: CLOUDSTACK-10282: firewall rules operation should be done with ip6tab… URL: https://github.com/apache/cloudstack/pull/2450#issuecomment-364857790 Rebased done @rhtyd This bug leaves the systemvm with all port opens This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org > SystemVM - filrewall rules incorrect > > > Key: CLOUDSTACK-10282 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10282 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: SystemVM >Reporter: Marc-Aurèle Brothier >Priority: Major > > The current state of the firewall on the systemVMs let all packets come in > due to the overwrite of the ipv6 rules on the ipv4. -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (CLOUDSTACK-10282) SystemVM - filrewall rules incorrect
[ https://issues.apache.org/jira/browse/CLOUDSTACK-10282?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16359516#comment-16359516 ] ASF GitHub Bot commented on CLOUDSTACK-10282: - rhtyd commented on issue #2450: CLOUDSTACK-10282: firewall rules operation should be done with ip6tab… URL: https://github.com/apache/cloudstack/pull/2450#issuecomment-364673542 @marcaurele LGTM, can you change the base branch to 4.11? This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org > SystemVM - filrewall rules incorrect > > > Key: CLOUDSTACK-10282 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10282 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: SystemVM >Reporter: Marc-Aurèle Brothier >Priority: Major > > The current state of the firewall on the systemVMs let all packets come in > due to the overwrite of the ipv6 rules on the ipv4. -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (CLOUDSTACK-10282) SystemVM - filrewall rules incorrect
[ https://issues.apache.org/jira/browse/CLOUDSTACK-10282?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16359422#comment-16359422 ] ASF GitHub Bot commented on CLOUDSTACK-10282: - resmo commented on issue #2450: CLOUDSTACK-10282: firewall rules operation should be done with ip6tab… URL: https://github.com/apache/cloudstack/pull/2450#issuecomment-364650442 LGTM This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org > SystemVM - filrewall rules incorrect > > > Key: CLOUDSTACK-10282 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10282 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: SystemVM >Reporter: Marc-Aurèle Brothier >Priority: Major > > The current state of the firewall on the systemVMs let all packets come in > due to the overwrite of the ipv6 rules on the ipv4. -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (CLOUDSTACK-10282) SystemVM - filrewall rules incorrect
[ https://issues.apache.org/jira/browse/CLOUDSTACK-10282?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16359019#comment-16359019 ] ASF GitHub Bot commented on CLOUDSTACK-10282: - ustcweizhou commented on issue #2450: CLOUDSTACK-10282: firewall rules operation should be done with ip6tab… URL: https://github.com/apache/cloudstack/pull/2450#issuecomment-364577118 LGTM This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org > SystemVM - filrewall rules incorrect > > > Key: CLOUDSTACK-10282 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10282 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: SystemVM >Reporter: Marc-Aurèle Brothier >Priority: Major > > The current state of the firewall on the systemVMs let all packets come in > due to the overwrite of the ipv6 rules on the ipv4. -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (CLOUDSTACK-10282) SystemVM - filrewall rules incorrect
[ https://issues.apache.org/jira/browse/CLOUDSTACK-10282?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16358753#comment-16358753 ] ASF GitHub Bot commented on CLOUDSTACK-10282: - marcaurele opened a new pull request #2450: CLOUDSTACK-10282: firewall rules operation should be done with ip6tab… URL: https://github.com/apache/cloudstack/pull/2450 …les-xxx command This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org > SystemVM - filrewall rules incorrect > > > Key: CLOUDSTACK-10282 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10282 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: SystemVM >Reporter: Marc-Aurèle Brothier >Priority: Major > > The current state of the firewall on the systemVMs let all packets come in > due to the overwrite of the ipv6 rules on the ipv4. -- This message was sent by Atlassian JIRA (v7.6.3#76005)
