cloudstack-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Frank Louwers (JIRA)" <j...@apache.org>
Subject [jira] [Created] (CLOUDSTACK-8650) When using security groups, adding in ingress rule for protocol "all" for source cidr 0.0.0.0/0 is impossible
Date Fri, 17 Jul 2015 15:21:04 GMT
Frank Louwers created CLOUDSTACK-8650:
-----------------------------------------

             Summary: When using security groups, adding in ingress rule for protocol "all"
for source cidr 0.0.0.0/0 is impossible
                 Key: CLOUDSTACK-8650
                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-8650
             Project: CloudStack
          Issue Type: Bug
      Security Level: Public (Anyone can view this level - this is the default.)
            Reporter: Frank Louwers
            Priority: Minor


While it is possible to add ingress rules for tcp, udp and icmp for source range 0.0.0.0/0,
it is currently impossible to add a rule for protocol all for source range 0.0.0.0/0.

So these work (using eg cloudmonkey):

  * authorize securitygroupingress securitygroupid=$id cidrlist="0.0.0.0/0" protocol=tcp
  * authorize securitygroupingress securitygroupid=$id cidrlist="0.0.0.0/0" protocol=icmp
  * authorize securitygroupingress securitygroupid=$id cidrlist="0.0.0.0/1" protocol=all
  * authorize securitygroupingress securitygroupid=$id cidrlist="128.0.0.0/1" protocol=all

But this doesn't work:

  * authorize securitygroupingress securitygroupid=$id cidrlist="0.0.0.0/0" protocol=all


Fix is in https://github.com/apache/cloudstack/pull/601



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message