yahoo-eng-team team mailing list archive

Thread
Date

[Bug 1204698] Re: iptables spoofing chain

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Akihiro Motoki <1204698@xxxxxxxxxxxxxxxxxx>
Date: Mon, 21 Oct 2013 12:29:08 -0000
Reply-to: Bug 1204698 <1204698@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

It was fixed in commit 0efce6195fa7be and released as a part of Havana.


** Changed in: neutron
       Status: Triaged => Invalid

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1204698

Title:
  iptables spoofing chain

Status in OpenStack Neutron (virtual network service):
  Invalid

Bug description:
  Currently when there is more then one ipaddress  assigned to a port a
  new chain IP_SPOOF_FILTER is created and if there is only one
  ip_address the SPOOF rule goes into the EGRESS_DIRECTION chain. This
  is somewhat confusing and would be better if all the spoofing logic
  was in their own chain. This needs to be done anyways as part of the
  virtual-address blueprint so i'm breaking this part off into a bug to
  more clearly scope the patches.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1204698/+subscriptions