Monitor firewall rules on collector to avoid lab data

[Alexander Charykov]

Add monitoring of firewall rules that denies access from lab networks.

[Bogdan Dobrelya (bogdando)]

Please elaborate why this bug has a high priority. What is deploy and ops and UX impact?

[Alexander Charykov (acharykov)]

Moving to 8.0 we don't have time to fix it now.

[Igor Shishkin (teran)]

Frankly speaking I'm not sure "monitoring" is a proper solution here since firewall is a part of node configuration.
So it's state should be verified before being applied since failures here could cause huge security problems(globally speaking about firewall).

[Alexander Charykov (acharykov)]

This check belongs to accident run of iptables -F command. If it is done stats from ci would corrupt stats data.

[Igor Shishkin (teran)]

So we probably must not do anything manually and do not test in production.
This will cover the case and makes us not needed to cover firewall with useless items.