Re: [VOTE] Upgrade Log4j to Log4j2

2023-05-18 Thread Sidimar Carniel
Important effort in this work! [ ] +1 approve Regards, Sidimar Carniel Em qua., 17 de mai. de 2023 às 10:27, Rodrigo D. Lopez < rodrigoduartelo...@gmail.com> escreveu: > Thanks for the great work! > > Based on discussions in PR and the discussion thread[1]. My vote is +1. > > Log4j v1

IP Spoofing and IP Theft

2023-05-18 Thread Wei ZHOU
Yes, as Jithin said cloudstack uses iptables/ebtables/ipset to prevent IP spoofing in advanced zone with security groups. If the IP or mac address of vm instance is modified inside the vm by the user, the vm will not work. -Wei On Thursday, 18 May 2023, Jithin Raju wrote: > Hi Willard, > > I

Re: IP Spoofing and IP Theft

2023-05-18 Thread Bryan Lima
Hello Willard, ACS has the configuration `api.allowed.source.cidr.list` which is a comma-separated list of IPv4/IPv6 CIDRs from which API calls can be performed. Therefore, it is possible to filter from which IP addresses the ACS will accept calls; this parameter is also configurable at the

Re: IP Spoofing and IP Theft

2023-05-18 Thread Jithin Raju
Hi Willard, I believe there is something implemented using iptables,ebtables to prevent IP spoofing for security group enabled zones. You need to take this into account if you are using security group enabled zones. -Jithin From: Will Conrad Date: Thursday, 18 May 2023 at 1:08 PM To:

Re: Managing Security bewteen account in Advanced Zone without SG

2023-05-18 Thread Jithin Raju
Hi Pratik, You probably want to create a new custom ACL list and add your own ACL rules. Go to the tier and replace the ‘default_allow’ ACL list with the new one. -Jithin From: Pratik Chandrakar Date: Wednesday, 17 May 2023 at 8:33 AM To: users@cloudstack.apache.org Subject: Re: Managing

IP Spoofing and IP Theft

2023-05-18 Thread Will Conrad
Hello Community! It looks like cloudstack has built-iin protection to prevent IP spoofing, I am wondering what kind (if any) of protections cloudstack has built-in to protect the environment from IP theft, or is this a consideration that should be taken into account when designing the network

Re: VMWare dvSwitch - import port groups to Cloudstack

2023-05-18 Thread Vivek Kumar
Hello, So I have recently imported 30+ VMs from vCenter to Cloudstack, I have created a L2 network with same VLAN where VMs were running on vCenter, So I deleted the NIC from VM from vCenter, import it to the cloudstack (If you have active NIC on the VM then while importing the VM it will

RE: VMWare dvSwitch - import port groups to Cloudstack

2023-05-18 Thread Jafar Aghabalayev
Thanks a lot, Alex. -Original Message- From: Alex Mattioli Sent: Wednesday, May 17, 2023 5:14 PM To: users@cloudstack.apache.org Subject: RE: VMWare dvSwitch - import port groups to Cloudstack CAUTION: This email originated from outside the organization. Do not click links or open