Slawek Kaplonski 9ab5159d2d [OVS FW] Allow egress ICMPv6 only for know addresses ... Before that patch it was possible to send ICMPv6 packets like e.g. neutron_lib.constants.ICMPV6_TYPE_MLD_QUERY, neutron_lib.constants.ICMPV6_TYPE_RS, neutron_lib.constants.ICMPV6_TYPE_NS, neutron_lib.constants.ICMPV6_TYPE_NA And that could cause some security issues as instance could advertise that it owns IPv6 address which really don't belong to it. Now rules in table=71 which allows that traffic are "per mac/ipaddress" and are allowed only for fixed ips allocated to port and port's allowed_address_pairs. Conflicts: neutron/agent/linux/openvswitch_firewall/firewall.py neutron/tests/unit/agent/linux/openvswitch_firewall/test_firewall.py Closes-Bug: #1902917 Change-Id: I4749fdc6a6cabd253b971bf4010ff76f5593c59c (cherry picked from commit 4b5bcff64c)		2021-02-27 20:15:42 +00:00
..
_static	Neutron Feature Classification	2017-03-15 23:31:58 +00:00
admin	DVR: Ignore DHCP port during DVR host query	2020-02-01 01:13:43 +00:00
cli	import content from cli-reference in openstack-manuals	2017-07-10 18:06:29 +00:00
configuration	Add auto-generated config reference	2017-07-30 21:14:40 +00:00
contributor	[OVS FW] Allow egress ICMPv6 only for know addresses	2021-02-27 20:15:42 +00:00
ext	Fix local doc builds	2018-06-21 07:14:33 -05:00
feature_classification	Update the documentation links	2017-12-13 10:49:46 +00:00
install	neutron.conf needs lock_path set for router to operate	2019-04-16 14:27:25 +00:00
conf.py	Fix local doc builds	2018-06-21 07:14:33 -05:00
index.rst	Add search capability to the docs	2018-03-08 11:13:05 -05:00