yahoo-eng-team team mailing list archive

[Sridhar Gaddam <sridhar.gaddam@xxxxxxxxxxxx>]

*** This bug is a duplicate of bug 1289088 ***
    https://bugs.launchpad.net/bugs/1289088

Hello yong sheng gong, I'm marking this Bug as a duplicate. If you think
it is not the case, feel free to re-open.

** This bug has been marked a duplicate of bug 1289088
   iptables firewall doesn't parse icmp type in security group rule

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1301262

Title:
  icmp type and code are not used at all  in SG feature

Status in OpenStack Neutron (virtual network service):
  New

Bug description:
  I created a sg rule which is like:
  neutron security-group-rule-create 39f7bff9-4a55-4813-be3d-1d89f8c5a95b --protocol icmp --direction ingress --ethertype ipv4 --port-range-min -1 --port-range-max 4

  and when it is converted into iptables rule:
  it is just like:
  -A runpy.py-ib551e32d-4 -m state --state INVALID -j DROP
  -A runpy.py-ib551e32d-4 -m state --state RELATED,ESTABLISHED -j RETURN
  -A runpy.py-ib551e32d-4 -p icmp -j RETURN

  It is obvious, the type and code of icmp is not used at all.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1301262/+subscriptions