cloudstack/scripts/vm/hypervisor/xenserver
Anthony Xu 2d87e64371 CLOUDSTACK-3963:
in security group, CS put a rule in ebtables filter table FORWARD chain to prevent user from changing VM mac address
util.pread2(['ebtables', '-A', vm_chain, '-i', vif, '-s', '!', vm_mac,  '-j', 'DROP'])

if user changes the VM mac address, all egress packet from the VM will be dropped, but the egress packet still contaminate the bridge cache with fake MAC,

This patch moves the rule to ebtables nat table PREROUTING chain, then the egress packet with modified MAC will not contaminate the bridge cache.
2013-07-30 17:34:44 -07:00
..
xcposs CLOUDSTACK-2543: [Multiple_IP_Ranges] Failed to create IP alias on router vm 2013-05-20 20:40:59 +05:30
xcpserver CLOUDSTACK-2543: [Multiple_IP_Ranges] Failed to create IP alias on router vm 2013-05-20 20:40:59 +05:30
xenserver56 CLOUDSTACK-2543: [Multiple_IP_Ranges] Failed to create IP alias on router vm 2013-05-20 20:40:59 +05:30
xenserver56fp1 CLOUDSTACK-2543: [Multiple_IP_Ranges] Failed to create IP alias on router vm 2013-05-20 20:40:59 +05:30
xenserver60 CLOUDSTACK-2543: [Multiple_IP_Ranges] Failed to create IP alias on router vm 2013-05-20 20:40:59 +05:30
add_to_vcpus_params_live.sh CLOUDSTACK-2085: VM weight on xen remain same as before vmscaleup ;because "Add-To-VCPUs-Params-Live.sh" is not getting copied on xs host 2013-05-15 16:17:21 +05:30
check_heartbeat.sh license header changes for scripts folder from Chip Childers 2012-06-23 00:58:00 -04:00
cloud-clean-vlan.sh license header changes for scripts folder from Chip Childers 2012-06-23 00:58:00 -04:00
cloud-prepare-upgrade.sh license header changes for scripts folder from Chip Childers 2012-06-23 00:58:00 -04:00
cloud-propagate-vlan.sh Summary: several scripts are not mode executable 2013-01-17 11:21:42 -07:00
cloud-setup-bonding.sh license header changes for scripts folder from Chip Childers 2012-06-23 00:58:00 -04:00
cloudstack_pluginlib.py license header changes for scripts folder from Chip Childers 2012-06-23 00:58:00 -04:00
cloudstack_plugins.conf license header changes for scripts folder from Chip Childers 2012-06-23 00:58:00 -04:00
copy_vhd_from_secondarystorage.sh license header changes for scripts folder from Chip Childers 2012-06-23 00:58:00 -04:00
copy_vhd_to_secondarystorage.sh license header changes for scripts folder from Chip Childers 2012-06-23 00:58:00 -04:00
create_privatetemplate_from_snapshot.sh license header changes for scripts folder from Chip Childers 2012-06-23 00:58:00 -04:00
createipAlias.sh Incorportaed the review changes Now dhcpservice IPs are removed when last vm from the subnet is removed. 2013-07-17 16:53:11 +05:30
deleteipAlias.sh Incorportaed the review changes Now dhcpservice IPs are removed when last vm from the subnet is removed. 2013-07-17 16:53:11 +05:30
hostvmstats.py license header changes for scripts folder from Chip Childers 2012-06-23 00:58:00 -04:00
kill_copy_process.sh license header changes for scripts folder from Chip Childers 2012-06-23 00:58:00 -04:00
launch_hb.sh license header changes for scripts folder from Chip Childers 2012-06-23 00:58:00 -04:00
make_migratable.sh license header changes for scripts folder from Chip Childers 2012-06-23 00:58:00 -04:00
mockxcpplugin.py finaly, finish download template to primary storage 2012-12-20 19:06:02 -08:00
network_info.sh license header changes for scripts folder from Chip Childers 2012-06-23 00:58:00 -04:00
ovs-get-bridge.sh PVLAN: Add network label parameter to PvlanSetupCommand 2013-05-01 13:23:09 -07:00
ovs-get-dhcp-iface.sh PVLAN: PvlanSetupCommand for KVM support 2013-05-01 13:23:09 -07:00
ovs-pvlan PVLAN: PvlanSetupCommand for KVM support 2013-05-01 13:23:09 -07:00
ovs-vif-flows.py CLOUDSTACK-3963: 2013-07-30 17:34:44 -07:00
ovstunnel license header changes for scripts folder from Chip Childers 2012-06-23 00:58:00 -04:00
s3xen - CLOUDSTACK-2583: PEP-8 compliance for s3xen 2013-07-23 18:40:26 -04:00
setup_heartbeat_file.sh license header changes for scripts folder from Chip Childers 2012-06-23 00:58:00 -04:00
setup_heartbeat_sr.sh license header changes for scripts folder from Chip Childers 2012-06-23 00:58:00 -04:00
setup_iscsi.sh license header changes for scripts folder from Chip Childers 2012-06-23 00:58:00 -04:00
setupxenserver.sh don't overwrite logrotate in XenServer 2013-07-18 16:37:46 -07:00
storagePlugin refactor test cases: use testNG instead of junit, as testNG can group test cases and pass parameter to test case 2012-12-22 22:10:39 -08:00
swift swift is written in python 2.6 2011-10-13 12:07:09 -07:00
swiftxen license header changes for scripts folder from Chip Childers 2012-06-23 00:58:00 -04:00
upgrade_snapshot.sh license header changes for scripts folder from Chip Childers 2012-06-23 00:58:00 -04:00
upgrade_vnc_config.sh license header changes for scripts folder from Chip Childers 2012-06-23 00:58:00 -04:00
vmops CLOUDSTACK-3963: 2013-07-30 17:34:44 -07:00
vmopsSnapshot CLOUDSTACK-3769: Fixed variable name localMountPointPath in vmopsSnapshot plugin 2013-07-25 16:26:40 +05:30
vmopspremium license header changes for scripts folder from Chip Childers 2012-06-23 00:58:00 -04:00
xen-ovs-vif-flows.rules license header changes for scripts folder from Chip Childers 2012-06-23 00:58:00 -04:00
xenheartbeat.sh Review 9647: In some storage failure scenario’s the NFS timeout can 2013-03-05 15:38:54 +01:00
xs_cleanup.sh license header changes for scripts folder from Chip Childers 2012-06-23 00:58:00 -04:00