You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cloudstack.apache.org by bh...@apache.org on 2017/11/23 06:12:45 UTC
[cloudstack] branch master updated: CLOUDSTACK-10152: Skip the destination cidr in ipset when 0.0.0.0/0 pa… (#2334)
This is an automated email from the ASF dual-hosted git repository.
bhaisaab pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/cloudstack.git
The following commit(s) were added to refs/heads/master by this push:
new 8832758 CLOUDSTACK-10152: Skip the destination cidr in ipset when 0.0.0.0/0 pa… (#2334)
8832758 is described below
commit 88327580b08e2abec2d3c817ab0336e394563cd6
Author: Jayapal <ja...@gmail.com>
AuthorDate: Thu Nov 23 11:42:43 2017 +0530
CLOUDSTACK-10152: Skip the destination cidr in ipset when 0.0.0.0/0 pa… (#2334)
Skip the destination cidr in ipset when 0.0.0.0/0 passed.
Fixed adding issue with egress dest cidr with 0.0.0.0/0.
---
systemvm/patches/debian/config/opt/cloud/bin/configure.py | 3 +++
1 file changed, 3 insertions(+)
diff --git a/systemvm/patches/debian/config/opt/cloud/bin/configure.py b/systemvm/patches/debian/config/opt/cloud/bin/configure.py
index f111309..bc5349a 100755
--- a/systemvm/patches/debian/config/opt/cloud/bin/configure.py
+++ b/systemvm/patches/debian/config/opt/cloud/bin/configure.py
@@ -120,6 +120,7 @@ class CsAcl(CsDataBag):
self.add_rule()
def add_rule(self):
+ CIDR_ALL = '0.0.0.0/0'
icmp_type = ''
rule = self.rule
icmp_type = "any"
@@ -172,6 +173,8 @@ class CsAcl(CsDataBag):
logging.debug("egress rule ####==> %s", self.rule)
for cidr in self.rule['dcidr']:
+ if cidr == CIDR_ALL:
+ continue
ipsetAddCmd = 'ipset add '+ destIpsetName + ' '+cidr
CsHelper.execute(ipsetAddCmd)
dflag = True
--
To stop receiving notification emails like this one, please contact
['"commits@cloudstack.apache.org" <co...@cloudstack.apache.org>'].