You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@cloudstack.apache.org by "Daan Hoogland (JIRA)" <ji...@apache.org> on 2017/02/08 09:23:56 UTC

[jira] [Closed] (CLOUDSTACK-6820) VPC router ICMP acl

     [ https://issues.apache.org/jira/browse/CLOUDSTACK-6820?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Daan Hoogland closed CLOUDSTACK-6820.
-------------------------------------
    Resolution: Won't Fix

> VPC router ICMP acl
> -------------------
>
>                 Key: CLOUDSTACK-6820
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-6820
>             Project: CloudStack
>          Issue Type: Improvement
>      Security Level: Public(Anyone can view this level - this is the default.) 
>          Components: Virtual Router
>    Affects Versions: 4.3.0
>            Reporter: Thijs Houtenbos
>            Priority: Minor
>              Labels: security
>
> There is a default allow icmp any any on the VPC router vm which cannot be controlled with the network ACLs. This makes it impossible to block certain icmp traffic.
> root@r-4135-VM:~# iptables -L -v | grep icmp
> 10784  901K ACCEPT     icmp --  any    any     anywhere             anywhere



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)