commit 7559512135d4dde16e019c94990a33b2603587b1
Author: Brian Haley <email address hidden>
Date: Thu Feb 15 13:57:32 2018 -0500
Only allow SG port ranges for whitelisted protocols
Iptables only supports port-ranges for certain protocols,
others will generate failures, possibly leaving the agent
looping trying to apply rules. Change to not allow port
ranges outside of the list of known good protocols.
Change-Id: I5867f77fc5aedc169b42f50def0424ff209c164c
Closes-bug: #1749667
(cherry picked from commit b564871bb759a38cf96527f94e7c7d4cc760b1c9)
Reviewed: https:/ /review. openstack. org/566921 /git.openstack. org/cgit/ openstack/ neutron/ commit/ ?id=7559512135d 4dde16e019c9499 0a33b2603587b1
Committed: https:/
Submitter: Zuul
Branch: stable/queens
commit 7559512135d4dde 16e019c94990a33 b2603587b1
Author: Brian Haley <email address hidden>
Date: Thu Feb 15 13:57:32 2018 -0500
Only allow SG port ranges for whitelisted protocols
Iptables only supports port-ranges for certain protocols,
others will generate failures, possibly leaving the agent
looping trying to apply rules. Change to not allow port
ranges outside of the list of known good protocols.
Change-Id: I5867f77fc5aedc 169b42f50def042 4ff209c164c cf96527f94e7c7d 4cc760b1c9)
Closes-bug: #1749667
(cherry picked from commit b564871bb759a38