]> review.fuel-infra Code Review - openstack-build/neutron-build.git/commit
Code Review / openstack-build / neutron-build.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: a36f237) | patch
Fix IP spoofing filter blocking all packets.
authorAnton Frolov <anfrolov@mirantis.com>
Fri, 14 Jun 2013 17:01:50 +0000 (21:01 +0400)
committerAnton Frolov <anfrolov@mirantis.com>
Mon, 17 Jun 2013 06:51:32 +0000 (10:51 +0400)
commit531ff2fb34df9e6b0f84ada811c29240f0f1cd48
tree60766213d384a9a9c413073b975257e677318145tree | snapshot
parenta36f2373d2d99e5e861704b4e2154b86758fffcdcommit | diff
Fix IP spoofing filter blocking all packets.

Implement IP spoofing filter by adding yet another chain to iptables
with RETURN rule for each of IP addresses assigned to port and DROP
rule at the end of the chain.

Fixes: bug #1190613
Change-Id: I2e7a0f8dd4c3519c57d28e87a44735a3482624b1
quantum/agent/linux/iptables_firewall.py diff | blob | history
quantum/tests/unit/test_iptables_firewall.py diff | blob | history