You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2022/03/07 18:07:00 UTC
[jira] [Commented] (QPID-8578) [Broker-J] ACL firewall predicates should be applied to HTTP(S) connections
[ https://issues.apache.org/jira/browse/QPID-8578?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17502471#comment-17502471 ]
ASF GitHub Bot commented on QPID-8578:
--------------------------------------
dakirily opened a new pull request #119:
URL: https://github.com/apache/qpid-broker-j/pull/119
This PR is supposed to solve issue described in JIRA [QPID-8578](https://issues.apache.org/jira/browse/QPID-8578).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
> [Broker-J] ACL firewall predicates should be applied to HTTP(S) connections
> ---------------------------------------------------------------------------
>
> Key: QPID-8578
> URL: https://issues.apache.org/jira/browse/QPID-8578
> Project: Qpid
> Issue Type: Improvement
> Components: Broker-J
> Affects Versions: qpid-java-broker-8.0.6
> Reporter: Daniil Kirilyuk
> Priority: Minor
>
> When configuring an ACL rule with the firewall predicate, e.g.
> {code:java}
> ACL ALLOW-LOG admin ALL ALL from_hostname="192.169.1.1,192.169.1.2"{code}
> or
> {code:java}
> ACL ALLOW-LOG admin ALL ALL from_network="192.169.1.*"{code}
> they are currently intended to use along with the ACCESS VIRTUALHOST rule to apply firewall restrictions for the messaging client.
>
> Firewall predicates should be applied to HTTP(S) connections as well, restricting access from undesirable hosts or networks.
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org