Slawek Kaplonski 9ab5159d2d [OVS FW] Allow egress ICMPv6 only for know addresses ... Before that patch it was possible to send ICMPv6 packets like e.g. neutron_lib.constants.ICMPV6_TYPE_MLD_QUERY, neutron_lib.constants.ICMPV6_TYPE_RS, neutron_lib.constants.ICMPV6_TYPE_NS, neutron_lib.constants.ICMPV6_TYPE_NA And that could cause some security issues as instance could advertise that it owns IPv6 address which really don't belong to it. Now rules in table=71 which allows that traffic are "per mac/ipaddress" and are allowed only for fixed ips allocated to port and port's allowed_address_pairs. Conflicts: neutron/agent/linux/openvswitch_firewall/firewall.py neutron/tests/unit/agent/linux/openvswitch_firewall/test_firewall.py Closes-Bug: #1902917 Change-Id: I4749fdc6a6cabd253b971bf4010ff76f5593c59c (cherry picked from commit 4b5bcff64c)		2021-02-27 20:15:42 +00:00
..
dashboards	Update the gerrit dashboard	2018-01-17 17:54:16 +09:00
internals	[OVS FW] Allow egress ICMPv6 only for know addresses	2021-02-27 20:15:42 +00:00
policies	Bug deputy routines for dummies	2018-07-27 18:20:53 +09:00
stadium	Update links in README	2018-06-12 16:32:55 +08:00
testing	[Fullstack] Remove central_external_bridge	2018-06-29 15:05:19 +02:00
alembic_migrations.rst	Fix url in alembic_migrations.rst	2018-06-12 11:40:03 +08:00
client_command_extensions.rst	Update the documentation link for doc migration	2017-07-22 18:46:13 +09:00
contribute.rst	Invalid link of doc reference	2018-07-11 13:58:37 +07:00
development_environment.rst	Replace openstack.org git:// URLs with https://	2019-03-24 20:34:37 +00:00
effective_neutron.rst	Update links in README	2018-06-12 16:32:55 +08:00
index.rst	doc: Fix non-existing URLs	2017-08-06 23:19:05 +00:00
modules.rst	Rearrange existing documentation to fit the new standard layout	2017-07-08 05:49:56 +00:00
neutron_api.rst	Rearrange existing documentation to fit the new standard layout	2017-07-08 05:49:56 +00:00