apache/cloudstack
1
0
Fork 0
mirror of https://github.com/apache/cloudstack.git synced 2025-11-02 20:02:29 +01:00
Code Issues Packages Projects Releases Wiki Activity

CLOUDSTACK-8925 - Drop the traffic when default egress is set to false

Browse Source 
- The DROP rule should be appended and the other rules inserted.
This commit is contained in:
Wilder Rodrigues 2015-11-02 12:00:22 +01:00
parent e3a4ec6cfd
commit caa0b4071c
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
systemvm/patches/debian/config/opt/cloud/bin/configure.py
View File

@ -97,12 +97,16 @@ class CsAcl(CsDataBag):
self.rule['last_port'] = obj['src_port_range'][1]
self.rule['allowed'] = True
self.rule['action'] = "ACCEPT"
# In that case it means we are processing the default egress rule
if self.rule['type'] == 'all' and not obj['source_cidr_list']:
if self.rule['default_egress_policy'] == 'false':
self.rule['action'] = "DROP"
self.rule['cidr'] = ['0.0.0.0/0']
else:
self.rule['cidr'] = obj['source_cidr_list']
self.rule['action'] = "ACCEPT"
logging.debug("AclIP created for rule ==> %s", self.rule)
def create(self):