← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1260731] [NEW] On an external network dhcp create a port which is not isolated

 

Public bug reported:

Dhcp port on a external network is not isolated/protected, thus an
external ip is able to request the dnsmasq dns. If there is an resolver
in the dhcp_conf file (dns_dnsmasq_server) an external user is able to
access to this server through the dnsmasq port. This could be a security
issue.

** Affects: neutron
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1260731

Title:
  On an external network dhcp create a port which is not isolated

Status in OpenStack Neutron (virtual network service):
  New

Bug description:
  Dhcp port on a external network is not isolated/protected, thus an
  external ip is able to request the dnsmasq dns. If there is an
  resolver in the dhcp_conf file (dns_dnsmasq_server) an external user
  is able to access to this server through the dnsmasq port. This could
  be a security issue.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1260731/+subscriptions


Follow ups

References