API tools faq
paste
s_schultchen

serv1b_pst_net.txt

s_schultchen
Dec 16th, 2016
120
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 17.31 KB | None | 0 0
raw download clone embed print report
  1. ############ ip a
  2. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
  3. link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  4. inet 127.0.0.1/8 scope host lo
  5. valid_lft forever preferred_lft forever
  6. inet6 ::1/128 scope host
  7. valid_lft forever preferred_lft forever
  8. 2: enp3s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 9000 qdisc pfifo_fast state UP qlen 1000
  9. link/ether d0:50:99:a8:3b:84 brd ff:ff:ff:ff:ff:ff
  10. inet 10.0.0.111/24 brd 10.0.0.255 scope global dynamic enp3s0
  11. valid_lft 34533sec preferred_lft 34533sec
  12. inet6 fe80::d250:99ff:fea8:3b84/64 scope link
  13. valid_lft forever preferred_lft forever
  14. 3: enp3s0.5@enp3s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP qlen 1000
  15. link/ether d0:50:99:a8:3b:84 brd ff:ff:ff:ff:ff:ff
  16. inet6 fe80::d250:99ff:fea8:3b84/64 scope link
  17. valid_lft forever preferred_lft forever
  18. 4: enp3s0.4@enp3s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master ovs-system state UP qlen 1000
  19. link/ether d0:50:99:a8:3b:84 brd ff:ff:ff:ff:ff:ff
  20. inet6 fe80::d250:99ff:fea8:3b84/64 scope link
  21. valid_lft forever preferred_lft forever
  22. 5: ovs-system: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
  23. link/ether 12:f4:16:3e:11:76 brd ff:ff:ff:ff:ff:ff
  24. 8: br-int: <BROADCAST,MULTICAST> mtu 1450 qdisc noop state DOWN qlen 1000
  25. link/ether b6:33:cf:b7:cf:46 brd ff:ff:ff:ff:ff:ff
  26. 9: vxlan_sys_4789: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 65470 qdisc noqueue master ovs-system state UNKNOWN qlen 1000
  27. link/ether 5e:0a:7b:d3:e8:33 brd ff:ff:ff:ff:ff:ff
  28. 10: br-tun: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
  29. link/ether 26:39:e5:1b:5a:49 brd ff:ff:ff:ff:ff:ff
  30. 11: br-provider: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
  31. link/ether d0:50:99:a8:3b:84 brd ff:ff:ff:ff:ff:ff
  32. 14: qbr61f980e9-98: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue state UP qlen 1000
  33. link/ether 52:4c:9b:7b:2e:8e brd ff:ff:ff:ff:ff:ff
  34. 15: qvo61f980e9-98@qvb61f980e9-98: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1450 qdisc noqueue master ovs-system state UP qlen 1000
  35. link/ether 0e:94:ea:ca:b8:5a brd ff:ff:ff:ff:ff:ff
  36. inet6 fe80::c94:eaff:feca:b85a/64 scope link
  37. valid_lft forever preferred_lft forever
  38. 16: qvb61f980e9-98@qvo61f980e9-98: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1450 qdisc noqueue master qbr61f980e9-98 state UP qlen 1000
  39. link/ether 52:4c:9b:7b:2e:8e brd ff:ff:ff:ff:ff:ff
  40. inet6 fe80::504c:9bff:fe7b:2e8e/64 scope link
  41. valid_lft forever preferred_lft forever
  42. 17: qbr95262f86-8a: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue state UP qlen 1000
  43. link/ether 9a:0f:c6:fa:a8:aa brd ff:ff:ff:ff:ff:ff
  44. 18: qvo95262f86-8a@qvb95262f86-8a: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1450 qdisc noqueue master ovs-system state UP qlen 1000
  45. link/ether fa:29:d2:b6:9e:ff brd ff:ff:ff:ff:ff:ff
  46. inet6 fe80::f829:d2ff:feb6:9eff/64 scope link
  47. valid_lft forever preferred_lft forever
  48. 19: qvb95262f86-8a@qvo95262f86-8a: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1450 qdisc noqueue master qbr95262f86-8a state UP qlen 1000
  49. link/ether 9a:0f:c6:fa:a8:aa brd ff:ff:ff:ff:ff:ff
  50. inet6 fe80::980f:c6ff:fefa:a8aa/64 scope link
  51. valid_lft forever preferred_lft forever
  52. 20: tap95262f86-8a: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc pfifo_fast master qbr95262f86-8a state UNKNOWN qlen 1000
  53. link/ether fe:16:3e:80:94:32 brd ff:ff:ff:ff:ff:ff
  54. inet6 fe80::fc16:3eff:fe80:9432/64 scope link
  55. valid_lft forever preferred_lft forever
  56. 21: tap61f980e9-98: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc pfifo_fast master qbr61f980e9-98 state UNKNOWN qlen 1000
  57. link/ether fe:16:3e:6c:6d:a3 brd ff:ff:ff:ff:ff:ff
  58. inet6 fe80::fc16:3eff:fe6c:6da3/64 scope link
  59. valid_lft forever preferred_lft forever
  60.  
  61.  
  62. ############ ip r
  63. default via 10.0.0.1 dev enp3s0 proto static metric 100
  64. 10.0.0.0/24 dev enp3s0 proto kernel scope link src 10.0.0.111 metric 100
  65.  
  66.  
  67. ############ ip netns
  68. qrouter-47b2f138-3130-4ab8-9c96-0f402190fe41
  69. qdhcp-8b050beb-3e0e-40ee-a74c-588ba57fd882
  70. ############ ip netns exec NAMESPACE ip a
  71.  
  72.  
  73. ############ip netns exec qrouter-47b2f138-3130-4ab8-9c96-0f402190fe41 ip a
  74. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
  75. link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  76. inet 127.0.0.1/8 scope host lo
  77. valid_lft forever preferred_lft forever
  78. inet6 ::1/128 scope host
  79. valid_lft forever preferred_lft forever
  80. 22: qr-c08eeda3-3b: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue state UNKNOWN qlen 1000
  81. link/ether fa:16:3e:1e:f9:ee brd ff:ff:ff:ff:ff:ff
  82. inet 10.0.12.1/24 brd 10.0.12.255 scope global qr-c08eeda3-3b
  83. valid_lft forever preferred_lft forever
  84. inet6 fe80::f816:3eff:fe1e:f9ee/64 scope link
  85. valid_lft forever preferred_lft forever
  86.  
  87.  
  88.  
  89. ############ip netns exec qdhcp-8b050beb-3e0e-40ee-a74c-588ba57fd882 ip a
  90. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
  91. link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  92. inet 127.0.0.1/8 scope host lo
  93. valid_lft forever preferred_lft forever
  94. inet6 ::1/128 scope host
  95. valid_lft forever preferred_lft forever
  96. 12: tapa2246d0c-f0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue state UNKNOWN qlen 1000
  97. link/ether fa:16:3e:64:90:74 brd ff:ff:ff:ff:ff:ff
  98. inet 10.0.12.2/24 brd 10.0.12.255 scope global tapa2246d0c-f0
  99. valid_lft forever preferred_lft forever
  100. inet 169.254.169.254/16 brd 169.254.255.255 scope global tapa2246d0c-f0
  101. valid_lft forever preferred_lft forever
  102. inet6 fe80::f816:3eff:fe64:9074/64 scope link
  103. valid_lft forever preferred_lft forever
  104.  
  105. ############ ip netns exec NAMESPACE ip r
  106.  
  107.  
  108. ############ip netns exec qrouter-47b2f138-3130-4ab8-9c96-0f402190fe41 ip r
  109. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
  110. link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  111. inet 127.0.0.1/8 scope host lo
  112. valid_lft forever preferred_lft forever
  113. inet6 ::1/128 scope host
  114. valid_lft forever preferred_lft forever
  115. 22: qr-c08eeda3-3b: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue state UNKNOWN qlen 1000
  116. link/ether fa:16:3e:1e:f9:ee brd ff:ff:ff:ff:ff:ff
  117. inet 10.0.12.1/24 brd 10.0.12.255 scope global qr-c08eeda3-3b
  118. valid_lft forever preferred_lft forever
  119. inet6 fe80::f816:3eff:fe1e:f9ee/64 scope link
  120. valid_lft forever preferred_lft forever
  121.  
  122.  
  123.  
  124. ############ip netns exec qdhcp-8b050beb-3e0e-40ee-a74c-588ba57fd882 ip r
  125. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
  126. link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  127. inet 127.0.0.1/8 scope host lo
  128. valid_lft forever preferred_lft forever
  129. inet6 ::1/128 scope host
  130. valid_lft forever preferred_lft forever
  131. 12: tapa2246d0c-f0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue state UNKNOWN qlen 1000
  132. link/ether fa:16:3e:64:90:74 brd ff:ff:ff:ff:ff:ff
  133. inet 10.0.12.2/24 brd 10.0.12.255 scope global tapa2246d0c-f0
  134. valid_lft forever preferred_lft forever
  135. inet 169.254.169.254/16 brd 169.254.255.255 scope global tapa2246d0c-f0
  136. valid_lft forever preferred_lft forever
  137. inet6 fe80::f816:3eff:fe64:9074/64 scope link
  138. valid_lft forever preferred_lft forever
  139.  
  140. ############ iptables-save
  141. # Generated by iptables-save v1.4.21 on Fri Dec 16 20:19:29 2016
  142. *raw
  143. :PREROUTING ACCEPT [372566:93072463]
  144. :OUTPUT ACCEPT [446741:188635805]
  145. :neutron-openvswi-OUTPUT - [0:0]
  146. :neutron-openvswi-PREROUTING - [0:0]
  147. -A PREROUTING -j neutron-openvswi-PREROUTING
  148. -A OUTPUT -j neutron-openvswi-OUTPUT
  149. -A neutron-openvswi-PREROUTING -m physdev --physdev-in qvb61f980e9-98 -j CT --zone 1
  150. -A neutron-openvswi-PREROUTING -m physdev --physdev-in tap61f980e9-98 -j CT --zone 1
  151. -A neutron-openvswi-PREROUTING -m physdev --physdev-in qvb95262f86-8a -j CT --zone 2
  152. -A neutron-openvswi-PREROUTING -m physdev --physdev-in tap95262f86-8a -j CT --zone 2
  153. COMMIT
  154. # Completed on Fri Dec 16 20:19:29 2016
  155. # Generated by iptables-save v1.4.21 on Fri Dec 16 20:19:29 2016
  156. *nat
  157. :PREROUTING ACCEPT [887:103144]
  158. :INPUT ACCEPT [819:96387]
  159. :OUTPUT ACCEPT [2865:207974]
  160. :POSTROUTING ACCEPT [2928:214256]
  161. :neutron-openvswi-OUTPUT - [0:0]
  162. :neutron-openvswi-POSTROUTING - [0:0]
  163. :neutron-openvswi-PREROUTING - [0:0]
  164. :neutron-openvswi-float-snat - [0:0]
  165. :neutron-openvswi-snat - [0:0]
  166. :neutron-postrouting-bottom - [0:0]
  167. -A PREROUTING -j neutron-openvswi-PREROUTING
  168. -A OUTPUT -j neutron-openvswi-OUTPUT
  169. -A POSTROUTING -j neutron-openvswi-POSTROUTING
  170. -A POSTROUTING -j neutron-postrouting-bottom
  171. -A neutron-openvswi-snat -j neutron-openvswi-float-snat
  172. -A neutron-postrouting-bottom -m comment --comment "Perform source NAT on outgoing traffic." -j neutron-openvswi-snat
  173. COMMIT
  174. # Completed on Fri Dec 16 20:19:29 2016
  175. # Generated by iptables-save v1.4.21 on Fri Dec 16 20:19:29 2016
  176. *mangle
  177. :PREROUTING ACCEPT [372570:93072759]
  178. :INPUT ACCEPT [372077:93026816]
  179. :FORWARD ACCEPT [524:57132]
  180. :OUTPUT ACCEPT [446745:188636101]
  181. :POSTROUTING ACCEPT [447269:188693233]
  182. :neutron-openvswi-FORWARD - [0:0]
  183. :neutron-openvswi-INPUT - [0:0]
  184. :neutron-openvswi-OUTPUT - [0:0]
  185. :neutron-openvswi-POSTROUTING - [0:0]
  186. :neutron-openvswi-PREROUTING - [0:0]
  187. :neutron-openvswi-mark - [0:0]
  188. -A PREROUTING -j neutron-openvswi-PREROUTING
  189. -A INPUT -j neutron-openvswi-INPUT
  190. -A FORWARD -j neutron-openvswi-FORWARD
  191. -A OUTPUT -j neutron-openvswi-OUTPUT
  192. -A POSTROUTING -j neutron-openvswi-POSTROUTING
  193. -A neutron-openvswi-PREROUTING -j neutron-openvswi-mark
  194. COMMIT
  195. # Completed on Fri Dec 16 20:19:29 2016
  196. # Generated by iptables-save v1.4.21 on Fri Dec 16 20:19:29 2016
  197. *filter
  198. :INPUT ACCEPT [372093:93028240]
  199. :FORWARD ACCEPT [0:0]
  200. :OUTPUT ACCEPT [446761:188637525]
  201. :neutron-filter-top - [0:0]
  202. :neutron-openvswi-FORWARD - [0:0]
  203. :neutron-openvswi-INPUT - [0:0]
  204. :neutron-openvswi-OUTPUT - [0:0]
  205. :neutron-openvswi-i61f980e9-9 - [0:0]
  206. :neutron-openvswi-i95262f86-8 - [0:0]
  207. :neutron-openvswi-local - [0:0]
  208. :neutron-openvswi-o61f980e9-9 - [0:0]
  209. :neutron-openvswi-o95262f86-8 - [0:0]
  210. :neutron-openvswi-s61f980e9-9 - [0:0]
  211. :neutron-openvswi-s95262f86-8 - [0:0]
  212. :neutron-openvswi-sg-chain - [0:0]
  213. :neutron-openvswi-sg-fallback - [0:0]
  214. -A INPUT -j neutron-openvswi-INPUT
  215. -A FORWARD -j neutron-filter-top
  216. -A FORWARD -j neutron-openvswi-FORWARD
  217. -A OUTPUT -j neutron-filter-top
  218. -A OUTPUT -j neutron-openvswi-OUTPUT
  219. -A neutron-filter-top -j neutron-openvswi-local
  220. -A neutron-openvswi-FORWARD -m physdev --physdev-out tap61f980e9-98 --physdev-is-bridged -m comment --comment "Direct traffic from the VM interface to the security group chain." -j neutron-openvswi-sg-chain
  221. -A neutron-openvswi-FORWARD -m physdev --physdev-in tap61f980e9-98 --physdev-is-bridged -m comment --comment "Direct traffic from the VM interface to the security group chain." -j neutron-openvswi-sg-chain
  222. -A neutron-openvswi-FORWARD -m physdev --physdev-out tap95262f86-8a --physdev-is-bridged -m comment --comment "Direct traffic from the VM interface to the security group chain." -j neutron-openvswi-sg-chain
  223. -A neutron-openvswi-FORWARD -m physdev --physdev-in tap95262f86-8a --physdev-is-bridged -m comment --comment "Direct traffic from the VM interface to the security group chain." -j neutron-openvswi-sg-chain
  224. -A neutron-openvswi-INPUT -m physdev --physdev-in tap61f980e9-98 --physdev-is-bridged -m comment --comment "Direct incoming traffic from VM to the security group chain." -j neutron-openvswi-o61f980e9-9
  225. -A neutron-openvswi-INPUT -m physdev --physdev-in tap95262f86-8a --physdev-is-bridged -m comment --comment "Direct incoming traffic from VM to the security group chain." -j neutron-openvswi-o95262f86-8
  226. -A neutron-openvswi-i61f980e9-9 -m state --state RELATED,ESTABLISHED -m comment --comment "Direct packets associated with a known session to the RETURN chain." -j RETURN
  227. -A neutron-openvswi-i61f980e9-9 -s 10.0.12.4/32 -p udp -m udp --sport 67 -m udp --dport 68 -j RETURN
  228. -A neutron-openvswi-i61f980e9-9 -s 10.0.12.3/32 -p udp -m udp --sport 67 -m udp --dport 68 -j RETURN
  229. -A neutron-openvswi-i61f980e9-9 -s 10.0.12.2/32 -p udp -m udp --sport 67 -m udp --dport 68 -j RETURN
  230. -A neutron-openvswi-i61f980e9-9 -p udp -m udp -m multiport --dports 1:65535 -j RETURN
  231. -A neutron-openvswi-i61f980e9-9 -p icmp -j RETURN
  232. -A neutron-openvswi-i61f980e9-9 -p tcp -m tcp -m multiport --dports 1:65535 -j RETURN
  233. -A neutron-openvswi-i61f980e9-9 -m state --state INVALID -m comment --comment "Drop packets that appear related to an existing connection (e.g. TCP ACK/FIN) but do not have an entry in conntrack." -j DROP
  234. -A neutron-openvswi-i61f980e9-9 -m comment --comment "Send unmatched traffic to the fallback chain." -j neutron-openvswi-sg-fallback
  235. -A neutron-openvswi-i95262f86-8 -m state --state RELATED,ESTABLISHED -m comment --comment "Direct packets associated with a known session to the RETURN chain." -j RETURN
  236. -A neutron-openvswi-i95262f86-8 -s 10.0.12.4/32 -p udp -m udp --sport 67 -m udp --dport 68 -j RETURN
  237. -A neutron-openvswi-i95262f86-8 -s 10.0.12.3/32 -p udp -m udp --sport 67 -m udp --dport 68 -j RETURN
  238. -A neutron-openvswi-i95262f86-8 -s 10.0.12.2/32 -p udp -m udp --sport 67 -m udp --dport 68 -j RETURN
  239. -A neutron-openvswi-i95262f86-8 -p udp -m udp -m multiport --dports 1:65535 -j RETURN
  240. -A neutron-openvswi-i95262f86-8 -p icmp -j RETURN
  241. -A neutron-openvswi-i95262f86-8 -p tcp -m tcp -m multiport --dports 1:65535 -j RETURN
  242. -A neutron-openvswi-i95262f86-8 -m state --state INVALID -m comment --comment "Drop packets that appear related to an existing connection (e.g. TCP ACK/FIN) but do not have an entry in conntrack." -j DROP
  243. -A neutron-openvswi-i95262f86-8 -m comment --comment "Send unmatched traffic to the fallback chain." -j neutron-openvswi-sg-fallback
  244. -A neutron-openvswi-o61f980e9-9 -s 0.0.0.0/32 -d 255.255.255.255/32 -p udp -m udp --sport 68 --dport 67 -m comment --comment "Allow DHCP client traffic." -j RETURN
  245. -A neutron-openvswi-o61f980e9-9 -j neutron-openvswi-s61f980e9-9
  246. -A neutron-openvswi-o61f980e9-9 -p udp -m udp --sport 68 --dport 67 -m comment --comment "Allow DHCP client traffic." -j RETURN
  247. -A neutron-openvswi-o61f980e9-9 -p udp -m udp --sport 67 -m udp --dport 68 -m comment --comment "Prevent DHCP Spoofing by VM." -j DROP
  248. -A neutron-openvswi-o61f980e9-9 -m state --state RELATED,ESTABLISHED -m comment --comment "Direct packets associated with a known session to the RETURN chain." -j RETURN
  249. -A neutron-openvswi-o61f980e9-9 -p icmp -j RETURN
  250. -A neutron-openvswi-o61f980e9-9 -p udp -m udp -m multiport --dports 1:65535 -j RETURN
  251. -A neutron-openvswi-o61f980e9-9 -p tcp -m tcp -m multiport --dports 1:65535 -j RETURN
  252. -A neutron-openvswi-o61f980e9-9 -m state --state INVALID -m comment --comment "Drop packets that appear related to an existing connection (e.g. TCP ACK/FIN) but do not have an entry in conntrack." -j DROP
  253. -A neutron-openvswi-o61f980e9-9 -m comment --comment "Send unmatched traffic to the fallback chain." -j neutron-openvswi-sg-fallback
  254. -A neutron-openvswi-o95262f86-8 -s 0.0.0.0/32 -d 255.255.255.255/32 -p udp -m udp --sport 68 --dport 67 -m comment --comment "Allow DHCP client traffic." -j RETURN
  255. -A neutron-openvswi-o95262f86-8 -j neutron-openvswi-s95262f86-8
  256. -A neutron-openvswi-o95262f86-8 -p udp -m udp --sport 68 --dport 67 -m comment --comment "Allow DHCP client traffic." -j RETURN
  257. -A neutron-openvswi-o95262f86-8 -p udp -m udp --sport 67 -m udp --dport 68 -m comment --comment "Prevent DHCP Spoofing by VM." -j DROP
  258. -A neutron-openvswi-o95262f86-8 -m state --state RELATED,ESTABLISHED -m comment --comment "Direct packets associated with a known session to the RETURN chain." -j RETURN
  259. -A neutron-openvswi-o95262f86-8 -p icmp -j RETURN
  260. -A neutron-openvswi-o95262f86-8 -p udp -m udp -m multiport --dports 1:65535 -j RETURN
  261. -A neutron-openvswi-o95262f86-8 -p tcp -m tcp -m multiport --dports 1:65535 -j RETURN
  262. -A neutron-openvswi-o95262f86-8 -m state --state INVALID -m comment --comment "Drop packets that appear related to an existing connection (e.g. TCP ACK/FIN) but do not have an entry in conntrack." -j DROP
  263. -A neutron-openvswi-o95262f86-8 -m comment --comment "Send unmatched traffic to the fallback chain." -j neutron-openvswi-sg-fallback
  264. -A neutron-openvswi-s61f980e9-9 -s 10.0.12.6/32 -m mac --mac-source FA:16:3E:6C:6D:A3 -m comment --comment "Allow traffic from defined IP/MAC pairs." -j RETURN
  265. -A neutron-openvswi-s61f980e9-9 -m comment --comment "Drop traffic without an IP/MAC allow rule." -j DROP
  266. -A neutron-openvswi-s95262f86-8 -s 10.0.12.9/32 -m mac --mac-source FA:16:3E:80:94:32 -m comment --comment "Allow traffic from defined IP/MAC pairs." -j RETURN
  267. -A neutron-openvswi-s95262f86-8 -m comment --comment "Drop traffic without an IP/MAC allow rule." -j DROP
  268. -A neutron-openvswi-sg-chain -m physdev --physdev-out tap61f980e9-98 --physdev-is-bridged -m comment --comment "Jump to the VM specific chain." -j neutron-openvswi-i61f980e9-9
  269. -A neutron-openvswi-sg-chain -m physdev --physdev-in tap61f980e9-98 --physdev-is-bridged -m comment --comment "Jump to the VM specific chain." -j neutron-openvswi-o61f980e9-9
  270. -A neutron-openvswi-sg-chain -m physdev --physdev-out tap95262f86-8a --physdev-is-bridged -m comment --comment "Jump to the VM specific chain." -j neutron-openvswi-i95262f86-8
  271. -A neutron-openvswi-sg-chain -m physdev --physdev-in tap95262f86-8a --physdev-is-bridged -m comment --comment "Jump to the VM specific chain." -j neutron-openvswi-o95262f86-8
  272. -A neutron-openvswi-sg-chain -j ACCEPT
  273. -A neutron-openvswi-sg-fallback -m comment --comment "Default drop rule for unmatched traffic." -j DROP
  274. COMMIT
  275. # Completed on Fri Dec 16 20:19:29 2016
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!