[systest] Need support check for iptables rules in systests

[Nastya Urlapova]

We have issue https://bugs.launchpad.net/fuel/+bug/1342019
some kind of check we should add to our systests, may be like additional step.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/108608

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/108608
Committed: https://git.openstack.org/cgit/stackforge/fuel-main/commit/?id=0790465b4c4b5f7bde6a13a964fbaa7ced83648d
Submitter: Jenkins
Branch: master

commit 0790465b4c4b5f7bde6a13a964fbaa7ced83648d
Author: Artem Panchenko <email address hidden>
Date: Tue Jul 22 11:29:27 2014 +0300

    Check firewall on slaves to detect security holes

    In different deployment scenarios Puppet generates
    different firewall rules and potentially can add
    permit rule, which will allow access to unused or
    secure ports/services. We should check iptables
    for security holes on slaves:
     1. listen on admin interface on some unused port
        (tcp or udp);
     2. try to connect to that port from master node
        and send data;
     3. check that connection attempt was blocked and
        data was not received.

    Change-Id: I1f625a75f4febf372948c47a1c920b6aed885a4b
    Closes-bug: #1346265

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/5.0
Review: https://review.openstack.org/110024

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/110024
Committed: https://git.openstack.org/cgit/stackforge/fuel-main/commit/?id=65bc5664054f439bb0f359d35812726f72670aaf
Submitter: Jenkins
Branch: stable/5.0

commit 65bc5664054f439bb0f359d35812726f72670aaf
Author: Artem Panchenko <email address hidden>
Date: Tue Jul 22 11:29:27 2014 +0300

    Check firewall on slaves to detect security holes

    In different deployment scenarios Puppet generates
    different firewall rules and potentially can add
    permit rule, which will allow access to unused or
    secure ports/services. We should check iptables
    for security holes on slaves:
     1. listen on admin interface on some unused port
        (tcp or udp);
     2. try to connect to that port from master node
        and send data;
     3. check that connection attempt was blocked and
        data was not received.

    Change-Id: I1f625a75f4febf372948c47a1c920b6aed885a4b
    Closes-bug: #1346265
    (cherry picked from commit 0790465b4c4b5f7bde6a13a964fbaa7ced83648d)