yahoo-eng-team team mailing list archive

[Inessa Vasilevskaya <ivasilevskaya@xxxxxxxxxxxx>]

Public bug reported:

Seen on: pike devstack, fwaas_v2

1. Create alow_icmp rule, a policy, a fw group, security group with all allowed.
2. 1 router, 2 subnets, fw group assigned to router ports.
3. Create deny_icmp rule and add it to policy
4. Make sure a vm in subnet1 can still ping a vm in subnet2 via router namespace unless

openstack firewall group rule set deny_icmp --enable-rule

is executed.

** Affects: neutron
     Importance: Undecided
     Assignee: Inessa Vasilevskaya (ivasilevskaya)
         Status: New

** Changed in: neutron
     Assignee: (unassigned) => Inessa Vasilevskaya (ivasilevskaya)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1711391

Title:
  fwaas: rule isn't applied right after being added to policy

Status in neutron:
  New

Bug description:
  Seen on: pike devstack, fwaas_v2

  1. Create alow_icmp rule, a policy, a fw group, security group with all allowed.
  2. 1 router, 2 subnets, fw group assigned to router ports.
  3. Create deny_icmp rule and add it to policy
  4. Make sure a vm in subnet1 can still ping a vm in subnet2 via router namespace unless

  openstack firewall group rule set deny_icmp --enable-rule

  is executed.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1711391/+subscriptions