Mailing-List: contact dev-help@cloudstack.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cloudstack.apache.org
Received-SPF: pass (nike.apache.org: local policy)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8;
 format=flowed
Content-Transfer-Encoding: 7bit
Date: Tue, 28 Jan 2014 10:31:05 +0000
From: Nux! <nux@li.nux.ro>
To: dev@cloudstack.apache.org
Subject: Re: Useless egress in SG =?UTF-8?Q?zone=3F?=
In-Reply-To: <A70E34D7-71DD-4A47-A34C-74A7709871A4@citrix.com>
References: <4ec7d678cb622f728a3a06285d31bed2@li.nux.ro>
 <CALFpzo57sOdSTz9goPiCo-i+a-Equ35F-M9AzDStwVSdnx_VTw@mail.gmail.com>
 <11ccf3bcaffade28a44ca8fb07551c7c@li.nux.ro>
 <A70E34D7-71DD-4A47-A34C-74A7709871A4@citrix.com>
Message-ID: <a7bcc772c9b1b0bcd168427bcd7622e3@li.nux.ro>
User-Agent: Roundcube Webmail/0.9-beta

On 28.01.2014 05:20, Jayapal Reddy Uradi wrote:
> Hi Nux,
> 
> 
> 1. By default we are allowing egress in SG.
> 2. But when you configure any rule in egress, it allows ONLY
> configured rule traffic and other traffic will be BLOCKED.
> 
> If admin wants allow to only specific ports/addresses this can be
> done by configuring SG egress rules.
> 
> In my firewalls, the default egress is allow for trusted networks.
> 
> Thanks,
> Jayapal

Thanks a lot Jayapal, this makes sense. What was confusing me is that 
in a Basic zone (hence SG) with Xenserver this is not working.
I can confirm it is working in an adv zone + SG with KVM.

Regards,
Lucian

-- 
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro