Brian Haley 4350ed3c35 Better handle ports in security groups ... After taking a closer look at bug 1818385, I found a couple of follow-on things to fix in the security group code. First, there are very few protocols that accept ports, especially via iptables. For this reason I think it's acceptable that the API rejects them as invalid. Second, UDPlite has some interesting support in iptables. It does not support using --dport directly, but does using '-m multiport --dports 123', and also supports port ranges using '-m multiport --dports 123:124'. Added code for this special case. Change-Id: Ifb2e6bb6c7a2e2987ba95040ef5a98ed50aa36d4 Closes-Bug: #1818385		2019-03-15 13:54:33 -04:00
..
notes	Better handle ports in security groups	2019-03-15 13:54:33 -04:00
source	Update reno for stable/rocky	2018-08-09 21:54:37 +00:00