You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@cloudstack.apache.org by Nux! <nu...@li.nux.ro> on 2014/02/10 13:57:14 UTC
Missing cidrlist in 4.3 adv zone firewall
Hi,
It's the first time I'm testing firewall in 4.3 Advanced zone (without
SG) so please let me know if I'm missing something obvious; I notice
the cidrlist is missing from the rules, both in UI and in cloudmonkey.
If I create the rule from cloudmoneky it also doesn't register a
cidrlist, so it doesn't seem to be UI's fault.
This is what I see in the logs http://fpaste.org/75819/39203643/ when I
create a rule. Anyone else experiencing this?
See http://img.nux.ro/3Kk-Selection_050.png
mycloudmonkey > list firewallrules
id=835dfc08-beab-458a-9c30-6b0b2b11f201
count = 1
firewallrule:
id = 835dfc08-beab-458a-9c30-6b0b2b11f201
cidrlist =
endport = 65535
ipaddress = 172.16.72.212
ipaddressid = f481629a-deb6-4413-b253-e8e98d8a303a
networkid = c615df7c-3ea3-4138-a83c-d848e20fe1f6
protocol = tcp
startport = 1
state = Active
tags:
--
Sent from the Delta quadrant using Borg technology!
Nux!
www.nux.ro
Re: Missing cidrlist in 4.3 adv zone firewall
Posted by Nux! <nu...@li.nux.ro>.
On 12.02.2014 13:12, Jayapal Reddy Uradi wrote:
> Hi Nux,
>
> I found this issue in upgraded setup with external firewall srx.
> I looking into this issue.
>
> Thanks,
> Jayapal
No, thank you :)
--
Sent from the Delta quadrant using Borg technology!
Nux!
www.nux.ro
Re: Missing cidrlist in 4.3 adv zone firewall
Posted by Jayapal Reddy Uradi <ja...@citrix.com>.
Hi Nux,
I found this issue in upgraded setup with external firewall srx.
I looking into this issue.
Thanks,
Jayapal
On 10/02/14 7:28 PM, "Nux!" <nu...@li.nux.ro> wrote:
>On 10.02.2014 13:28, Jayapal Reddy Uradi wrote:
>> Hi,
>>
>> Cidr showing correctly in our setup.
>> Is cidr stored in db table firewall_rules_cidrs ?
>
>Jayapal,
>
>I can see the CIDRs in that table.
>I also checked inside the VR and while iptables does have rules for the
>ports I mentioned, the CIDRs are missing, too.
>
>Do note this is an upgrade from 4.2.1.
>
>--
>Sent from the Delta quadrant using Borg technology!
>
>Nux!
>www.nux.ro
Re: Missing cidrlist in 4.3 adv zone firewall
Posted by Nux! <nu...@li.nux.ro>.
On 10.02.2014 13:28, Jayapal Reddy Uradi wrote:
> Hi,
>
> Cidr showing correctly in our setup.
> Is cidr stored in db table firewall_rules_cidrs ?
Jayapal,
I can see the CIDRs in that table.
I also checked inside the VR and while iptables does have rules for the
ports I mentioned, the CIDRs are missing, too.
Do note this is an upgrade from 4.2.1.
--
Sent from the Delta quadrant using Borg technology!
Nux!
www.nux.ro
Re: Missing cidrlist in 4.3 adv zone firewall
Posted by Jayapal Reddy Uradi <ja...@citrix.com>.
Hi,
Cidr showing correctly in our setup.
Is cidr stored in db table firewall_rules_cidrs ?
Thanks,
Jayapal
On 10-Feb-2014, at 6:27 PM, Nux! <nu...@li.nux.ro> wrote:
> Hi,
>
> It's the first time I'm testing firewall in 4.3 Advanced zone (without SG) so please let me know if I'm missing something obvious; I notice the cidrlist is missing from the rules, both in UI and in cloudmonkey.
> If I create the rule from cloudmoneky it also doesn't register a cidrlist, so it doesn't seem to be UI's fault.
> This is what I see in the logs http://fpaste.org/75819/39203643/ when I create a rule. Anyone else experiencing this?
>
>
> See http://img.nux.ro/3Kk-Selection_050.png
>
>
> mycloudmonkey > list firewallrules id=835dfc08-beab-458a-9c30-6b0b2b11f201
> count = 1
> firewallrule:
> id = 835dfc08-beab-458a-9c30-6b0b2b11f201
> cidrlist =
> endport = 65535
> ipaddress = 172.16.72.212
> ipaddressid = f481629a-deb6-4413-b253-e8e98d8a303a
> networkid = c615df7c-3ea3-4138-a83c-d848e20fe1f6
> protocol = tcp
> startport = 1
> state = Active
> tags:
>
> --
> Sent from the Delta quadrant using Borg technology!
>
> Nux!
> www.nux.ro