commit b564871bb759a38cf96527f94e7c7d4cc760b1c9
Author: Brian Haley <email address hidden>
Date: Thu Feb 15 13:57:32 2018 -0500
Only allow SG port ranges for whitelisted protocols
Iptables only supports port-ranges for certain protocols,
others will generate failures, possibly leaving the agent
looping trying to apply rules. Change to not allow port
ranges outside of the list of known good protocols.
Reviewed: https:/ /review. openstack. org/545091 /git.openstack. org/cgit/ openstack/ neutron/ commit/ ?id=b564871bb75 9a38cf96527f94e 7c7d4cc760b1c9
Committed: https:/
Submitter: Zuul
Branch: master
commit b564871bb759a38 cf96527f94e7c7d 4cc760b1c9
Author: Brian Haley <email address hidden>
Date: Thu Feb 15 13:57:32 2018 -0500
Only allow SG port ranges for whitelisted protocols
Iptables only supports port-ranges for certain protocols,
others will generate failures, possibly leaving the agent
looping trying to apply rules. Change to not allow port
ranges outside of the list of known good protocols.
Change-Id: I5867f77fc5aedc 169b42f50def042 4ff209c164c
Closes-bug: #1749667