openstack
/
neutron
Code Issues Proposed changes
neutron/neutron/tests/unit/agent/linux
History
Jens Harbott 0fce3ca2c1 Secure dnsmasq process against external abuse 
Currently any dhcp agent instance will work as an open resolver. For
deployments using publicly routed addresses for tenant networks, this
allows the agent being abused in dDoS attacks, see [1].

By setting the `--local-service` option dnsmasq will filter DNS queries
and reply only to queries from directly attached networks.

[1] https://bugs.launchpad.net/neutron/+bug/1501206

Closes-Bug: 1501206
Change-Id: I76d810aad2ce0f15a88bd798963012fa0efca74e
 		2018-11-28 15:49:25 -05:00
..
openvswitch_firewall Remove deprecated vsctl ovsdb_interface api 2018-10-11 14:59:34 -04:00
__init__.py Empty files should not contain copyright or license 2014-10-20 00:50:32 +00:00
failing_process.py Keep reading stdout/stderr until after kill 2015-11-19 19:14:13 +02:00
test_bridge_lib.py Fix UT BridgeLibTest when IPv6 is disabled 2018-06-05 12:02:26 +02:00
test_daemon.py Create temp file in setUp() to avoid warning 2018-10-03 10:00:03 +00:00
test_dhcp.py Secure dnsmasq process against external abuse 2018-11-28 15:49:25 -05:00
test_external_process.py Use flake8-import-order plugin 2017-07-05 03:15:27 +00:00
test_interface.py Merge "Delete ovs port if namespace is corrupted" 2018-09-05 21:47:30 +00:00
test_ip_conntrack.py Move conntrack zones to IPTablesFirewall 2017-03-30 14:54:51 -07:00
test_ip_lib.py Exclude fallback tunnel devices from netns cleanup 2018-10-10 15:01:49 +02:00
test_ip_link_support.py sriov: implement spoofchecking configuration 2015-07-29 19:38:25 +02:00
test_ip_monitor.py Fix W605 warnings 2018-05-17 16:20:59 +09:00
test_ipset_manager.py Create ipset set_name_exists() method 2015-10-14 10:18:44 -04:00
test_iptables_firewall.py Use system protocol assigments for iptables protocol map 2018-08-08 17:01:26 -04:00
test_iptables_manager.py Fix neutron-openvswitch-agent Windows support 2018-07-18 14:41:21 +03:00
test_keepalived.py Use flake8-import-order plugin 2017-07-05 03:15:27 +00:00
test_l3_tc_lib.py Make L3 IP tc filter rate limit more accurate 2018-06-20 02:21:28 +00:00
test_pd.py Fix errors in PrefixDelegation.remove_stale_ri_ifname 2017-05-02 16:46:56 +00:00
test_tc_lib.py Fix ingress bw limit for OVS DPDK ports 2018-01-15 13:19:14 +00:00
test_utils.py Fix neutron-openvswitch-agent Windows support 2018-07-18 14:41:21 +03:00
test_xenapi_root_helper.py Use os-xenapi for neutron when XenServer as hypervisor 2017-03-30 18:33:37 +00:00