Hi Mike,
Can you do me a favor and try out https://review.openstack.org/218517 ?
It moves the INVALID drop below the user-defined rules. With that patch applied, you should be able to add explicit allow rules that match the headers of the bad packets so they are permitted before the INVALID drop.
Hi Mike,
Can you do me a favor and try out https:/ /review. openstack. org/218517 ?
It moves the INVALID drop below the user-defined rules. With that patch applied, you should be able to add explicit allow rules that match the headers of the bad packets so they are permitted before the INVALID drop.