You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cloudstack.apache.org by "Chip Childers (JIRA)" <ji...@apache.org> on 2013/06/04 20:55:44 UTC

[jira] [Updated] (CLOUDSTACK-324) Cannot edit default security group rules, default security group blocks all inbound traffic.

     [ https://issues.apache.org/jira/browse/CLOUDSTACK-324?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Chip Childers updated CLOUDSTACK-324:
-------------------------------------

    Fix Version/s:     (was: 4.1.0)
                   4.2.0
    
> Cannot edit default security group rules, default security group blocks all inbound traffic.
> --------------------------------------------------------------------------------------------
>
>                 Key: CLOUDSTACK-324
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-324
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the default.) 
>    Affects Versions: pre-4.0.0
>            Reporter: Max Clark
>            Assignee: Wido den Hollander
>              Labels: iptables, network, security
>             Fix For: 4.2.0
>
>
> When configuring basic networking, by default the network is created with the "DefaultSharedNetworkOffering". This offering does not have a security group. No inbound traffic is allowed to the created VMs. Reading the AdminGuide documentation:
> "Each CloudStack account comes with a default security group that denies all inbound traffic and allows all outbound traffic. The default security group can be modified so that all new VMs inherit some other desired set of rules."
> If a network is created without a security group, it shouldn't have a security group and all inbound/outbound traffic should be allowed - or at the very least the default security group should be able to be configured.
> http://www.cloudstack.com/forum/8-storage-and-networking/7054-vm-instance-cant-be-accessd-using-basic-networking.html?limit=6&start=6#7084

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira