neutron/neutron/agent/linux
Jens Harbott 0fce3ca2c1 Secure dnsmasq process against external abuse
Currently any dhcp agent instance will work as an open resolver. For
deployments using publicly routed addresses for tenant networks, this
allows the agent being abused in dDoS attacks, see [1].

By setting the `--local-service` option dnsmasq will filter DNS queries
and reply only to queries from directly attached networks.

[1] https://bugs.launchpad.net/neutron/+bug/1501206

Closes-Bug: 1501206
Change-Id: I76d810aad2ce0f15a88bd798963012fa0efca74e
2018-11-28 15:49:25 -05:00
..
openvswitch_firewall Fix flake8 N534 untranslated exception message 2018-10-19 15:46:04 -04:00
__init__.py Empty files should not contain copyright or license 2014-10-20 00:50:32 +00:00
bridge_lib.py LinuxBridge: Use ifindex for logical 'timestamp' 2016-09-14 17:02:46 +00:00
daemon.py Remove argument "watch_log = " 2017-10-13 09:42:48 +08:00
dhcp.py Secure dnsmasq process against external abuse 2018-11-28 15:49:25 -05:00
dibbler.py use PROVISIONAL_IPV6_PD_PREFIX from neutron-lib 2017-11-14 12:26:43 -07:00
external_process.py Refactoring agent linux&ovsdb config 2017-08-25 10:41:39 -04:00
interface.py Delete ovs port if namespace is corrupted 2018-09-04 14:46:03 -04:00
ip_conntrack.py Remove race and simplify conntrack state management 2018-03-14 17:26:37 -04:00
ip_lib.py Exclude fallback tunnel devices from netns cleanup 2018-10-10 15:01:49 +02:00
ip_link_support.py Make code follow log translation guideline 2017-08-14 02:01:48 +00:00
ip_monitor.py Trivial: Move platform independent modules to common dir 2018-08-14 09:54:01 +03:00
ipset_manager.py use synchronized lock decorator from neutron-lib 2017-10-04 13:57:42 -06:00
iptables_comments.py Iptables firewall driver adds forward rules for trusted ports 2018-03-06 10:13:44 +01:00
iptables_firewall.py Use system protocol assigments for iptables protocol map 2018-08-08 17:01:26 -04:00
iptables_manager.py fix spell error 2018-08-29 09:20:36 +08:00
keepalived.py Fix all pep8 E265 errors 2018-04-30 16:35:52 -04:00
l3_tc_lib.py Make L3 IP tc filter rate limit more accurate 2018-06-20 02:21:28 +00:00
pd_driver.py use PROVISIONAL_IPV6_PD_PREFIX from neutron-lib 2017-11-14 12:26:43 -07:00
pd.py use PROVISIONAL_IPV6_PD_PREFIX from neutron-lib 2017-11-14 12:26:43 -07:00
ra.py Dropping radvd process privileges 2018-06-21 15:35:51 +02:00
tc_lib.py Fix all pep8 E265 errors 2018-04-30 16:35:52 -04:00
utils.py Fix flake8 H404 errors 2018-10-05 21:48:41 +00:00
xenapi_root_helper.py Fix all pep8 E129 errors 2018-05-03 13:44:04 +09:00