bug 11515: reapply all firewall rules for the IP address when VPN related rules are being revoked

status 11515: resolved fixed

Reviewed-by: will@cloud.com
This commit is contained in:
alena 2011-09-21 09:48:51 -07:00
parent bdd5b9c3d3
commit 6ea66248dd
1 changed files with 4 additions and 2 deletions

View File

@ -250,11 +250,13 @@ public class RemoteAccessVpnManagerImpl implements RemoteAccessVpnService, Manag
fwRules.add(_rulesDao.findByRelatedId(vpnFwRule.getId()));
}
s_logger.debug("Marked " + fwRules.size() + " firewall rules as Revoked as a part of disable remote access vpn");
txn.commit();
//now apply vpn rules on the backend
s_logger.debug("Applying " + fwRules.size() + " firewall rules as a part of disable remote access vpn");
success = _firewallMgr.applyFirewallRules(fwRules, false, caller);
s_logger.debug("Reapplying firewall rules for ip id=" + ipId + " as a part of disable remote access vpn");
success = _firewallMgr.applyFirewallRules(ipId, caller);
}
if (success) {