You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@cloudstack.apache.org by "Jayapal Reddy (JIRA)" <ji...@apache.org> on 2013/05/28 09:16:20 UTC

[jira] [Created] (CLOUDSTACK-2704) [Shared Nework] Allow Egress traffic for shared network by default

Jayapal Reddy created CLOUDSTACK-2704:
-----------------------------------------

             Summary: [Shared Nework] Allow Egress traffic for shared network by default
                 Key: CLOUDSTACK-2704
                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-2704
             Project: CloudStack
          Issue Type: Bug
      Security Level: Public (Anyone can view this level - this is the default.)
          Components: Network Controller, Network Devices
    Affects Versions: 4.1.0
            Reporter: Jayapal Reddy
            Assignee: Jayapal Reddy
             Fix For: 4.2.0


1. Egress rules blocks the guest traffic to public side by default.
2. Egress is not supported for shared networks so by default we should allow egress.
3. This issue can  be handled when CLOUDSTACK-1578 is fixed.

WorkAround:
1. In router execute the below command
iptables -A FW_OUTBOUND -j ACCEPT

2. To persist in router reboot add the below entry in iptables-router file after  '-I FW_OUTBOUND -m state --state RELATED,ESTABLISHED -j ACCEPT' entry

-A FW_OUTBOUND -j ACCPET


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira