add ICMP type to firewall rules support

Bug #1727893 reported by Ian Booth
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Canonical Juju
Triaged
Low
Unassigned

Bug Description

Juju supports adding ICMP firewall rules, but does not support specifying the ICMP type.

It seems libs like gopkg.in/amz.v4 lack this support in their APIs, so we'd need to audit and update those cloud API libraries if necessary in order to add support to Juju.

Getting this done is important as it's a potential security hole not to be able to have it if we want charms to use it.

At the very least, we should extend the open-port/close-port syntax to support the icmp type even if we don't yet implement it.

Ian Booth (wallyworld)
description: updated
Revision history for this message
Ian Booth (wallyworld) wrote :

This isn't critical since not all clouds seem to support ICMP type rules eg AWS does but not Azure

Changed in juju:
importance: Critical → Medium
Tim Penhey (thumper)
Changed in juju:
milestone: 2.3.0 → none
Revision history for this message
Canonical Juju QA Bot (juju-qa-bot) wrote :

This bug has not been updated in 2 years, so we're marking it Low importance. If you believe this is incorrect, please update the importance.

Changed in juju:
importance: Medium → Low
tags: added: expirebugs-bot
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.