Merge "Always filter out multicast from reflection"
This commit is contained in:
@@ -219,9 +219,8 @@ class NWFilterFirewall(base_firewall.FirewallDriver):
|
||||
filter_set = ['no-mac-spoofing',
|
||||
'no-ip-spoofing',
|
||||
'no-arp-spoofing']
|
||||
if CONF.use_ipv6:
|
||||
self._define_filter(self.nova_no_nd_reflection_filter)
|
||||
filter_set.append('nova-no-nd-reflection')
|
||||
self._define_filter(self.nova_no_nd_reflection_filter)
|
||||
filter_set.append('nova-no-nd-reflection')
|
||||
self._define_filter(self._filter_container('nova-nodhcp', filter_set))
|
||||
filter_set.append('allow-dhcp-server')
|
||||
self._define_filter(self._filter_container('nova-base', filter_set))
|
||||
|
Reference in New Issue
Block a user