Return-Path: X-Original-To: apmail-cloudstack-issues-archive@www.apache.org Delivered-To: apmail-cloudstack-issues-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id DD9FE100F7 for ; Tue, 9 Jul 2013 08:59:24 +0000 (UTC) Received: (qmail 88673 invoked by uid 500); 9 Jul 2013 08:48:30 -0000 Delivered-To: apmail-cloudstack-issues-archive@cloudstack.apache.org Received: (qmail 88600 invoked by uid 500); 9 Jul 2013 08:48:14 -0000 Mailing-List: contact issues-help@cloudstack.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cloudstack.apache.org Delivered-To: mailing list issues@cloudstack.apache.org Received: (qmail 88452 invoked by uid 500); 9 Jul 2013 08:48:04 -0000 Delivered-To: apmail-incubator-cloudstack-issues@incubator.apache.org Received: (qmail 88281 invoked by uid 99); 9 Jul 2013 08:47:48 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 09 Jul 2013 08:47:48 +0000 Date: Tue, 9 Jul 2013 08:47:48 +0000 (UTC) From: "Murali Reddy (JIRA)" To: cloudstack-issues@incubator.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Resolved] (CLOUDSTACK-234) create/delete firewa/lb/pf rule: send ip assoc command only on first rule is created on the IP and last rule is revoked on the IP MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/CLOUDSTACK-234?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Murali Reddy resolved CLOUDSTACK-234. ------------------------------------- Resolution: Fixed > create/delete firewa/lb/pf rule: send ip assoc command only on first rule is created on the IP and last rule is revoked on the IP > --------------------------------------------------------------------------------------------------------------------------------- > > Key: CLOUDSTACK-234 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-234 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the default.) > Components: Management Server > Affects Versions: 4.0.0 > Reporter: Alena Prokharchyk > Assignee: Murali Reddy > Fix For: 4.2.0 > > > We have to improve the logic for creating/deleting any kind of firewall rules. At the moment ipAssoc is being called when: > * the first rule for the ip address is being created > * the last rule for the IP address is being removed > As a part of ipAssoc command, we send all ip addresses assigned to the guest network of the rule. The behavior has to be fixed the way we send ip assoc only for the ip address the rule is being created for. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira