Public bug reported:
I created a sg rule which is like:
neutron security-group-rule-create 39f7bff9-4a55-4813-be3d-1d89f8c5a95b
--protocol icmp --direction ingress --ethertype ipv4 --port-range-min -1
--port-range-max 4
and when it is converted into iptables rule:
it is just like:
-A runpy.py-ib551e32d-4 -m state --state INVALID -j DROP
-A runpy.py-ib551e32d-4 -m state --state RELATED,ESTABLISHED -j RETURN
-A runpy.py-ib551e32d-4 -p icmp -j RETURN
It is obvious, the type and code of icmp is not used at all.
** Affects: neutron
Importance: Undecided
Status: New
** Description changed:
I created a sg rule which is like:
neutron security-group-rule-create 39f7bff9-4a55-4813-be3d-1d89f8c5a95b
--protocol icmp --direction ingress --ethertype ipv4 --port-range-min -1
--port-range-max 4
and when it is converted into iptables rule:
it is just like:
-A runpy.py-ib551e32d-4 -m state --state INVALID -j DROP
-A runpy.py-ib551e32d-4 -m state --state RELATED,ESTABLISHED -j RETURN
-A runpy.py-ib551e32d-4 -p icmp -j RETURN
- It is obviously, the type and code of icmp is not used at all.
+ It is obvious, the type and code of icmp is not used at all.
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1301262
Title:
icmp type and code are not used at all in SG feature
Status in OpenStack Neutron (virtual network service):
New
Bug description:
I created a sg rule which is like:
neutron security-group-rule-create 39f7bff9-4a55-4813-be3d-1d89f8c5a95b
--protocol icmp --direction ingress --ethertype ipv4 --port-range-min -1
--port-range-max 4
and when it is converted into iptables rule:
it is just like:
-A runpy.py-ib551e32d-4 -m state --state INVALID -j DROP
-A runpy.py-ib551e32d-4 -m state --state RELATED,ESTABLISHED -j RETURN
-A runpy.py-ib551e32d-4 -p icmp -j RETURN
It is obvious, the type and code of icmp is not used at all.
To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1301262/+subscriptions
--
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help : https://help.launchpad.net/ListHelp
