Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 3778D200B13 for ; Wed, 15 Jun 2016 08:45:34 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id 361A6160A4D; Wed, 15 Jun 2016 06:45:34 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 769C9160A4C for ; Wed, 15 Jun 2016 08:45:33 +0200 (CEST) Received: (qmail 82396 invoked by uid 500); 15 Jun 2016 06:45:32 -0000 Mailing-List: contact dev-help@cloudstack.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cloudstack.apache.org Delivered-To: mailing list dev@cloudstack.apache.org Received: (qmail 82385 invoked by uid 99); 15 Jun 2016 06:45:31 -0000 Received: from git1-us-west.apache.org (HELO git1-us-west.apache.org) (140.211.11.23) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 15 Jun 2016 06:45:31 +0000 Received: by git1-us-west.apache.org (ASF Mail Server at git1-us-west.apache.org, from userid 33) id C978DDFE59; Wed, 15 Jun 2016 06:45:31 +0000 (UTC) From: kishankavala To: dev@cloudstack.apache.org Reply-To: dev@cloudstack.apache.org References: In-Reply-To: Subject: [GitHub] cloudstack issue #1581: CLOUDSTACK-9404 Fixed ordering of network ACL rules ... Content-Type: text/plain Message-Id: <20160615064531.C978DDFE59@git1-us-west.apache.org> Date: Wed, 15 Jun 2016 06:45:31 +0000 (UTC) archived-at: Wed, 15 Jun 2016 06:45:34 -0000 Github user kishankavala commented on the issue: https://github.com/apache/cloudstack/pull/1581 @pdube though the fix looks good, the root of the issue is different. Earlier when bash scripts were used to configure rules on VR, iptable rules for ACLs were inserted (-I option). This changed to add (-A option) after VR refactor, resulting in rules being applied in the reverse order. --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled and wishes so, or if the feature is enabled but not working, please contact infrastructure at infrastructure@apache.org or file a JIRA ticket with INFRA. ---