cloudstack/scripts
Anthony Xu f1fb7c3efe in security group, CS put a rule in ebtables filter table FORWARD chain to prevent user from changing VM mac address
util.pread2(['ebtables', '-A', vm_chain, '-i', vif, '-s', '!', vm_mac,  '-j', 'DROP'])

if user changes the VM mac address, all egress packet from the VM will be dropped, but the egress packet still contaminate the bridge cache with fake MAC,

This patch moves the rule to ebtables nat table PREROUTING chain, then the egress packet with modified MAC will not contaminate the bridge cache.

Anthony
2013-07-30 17:04:21 -07:00
..
installer license header changes for scripts folder from Chip Childers 2012-06-23 00:58:00 -04:00
network CLOUDSTACK-3843: remove greedy results in save_password_to_domr.sh 2013-07-29 13:02:07 +02:00
storage vhd-util check doesn't work for some corrupted vhd file, use vhd-util read instead 2013-07-17 15:01:01 -07:00
util CloudStack CLOUDSTACK-774 2013-02-21 15:46:11 -08:00
vm in security group, CS put a rule in ebtables filter table FORWARD chain to prevent user from changing VM mac address 2013-07-30 17:04:21 -07:00
.pydevproject License header updates for the scripts folder. 2012-08-03 09:38:28 -04:00