weizhouapache commented on PR #14100: URL: https://github.com/apache/cloudstack/pull/14100#issuecomment-5604001586
verified the following cases | Ingress | Egress | Actual egress traffic | `ipset list cs_notrack` - before fix | `ipset list cs_notrack` - after fix | |---|---|---|---|---| | no rule (deny) | no rule | allowed (default ACCEPT) | not in set | not in set | | no rule (deny) | allow a (restricted) | allowed only for that rule | not in set | not in set | | no rule (deny) | **allow all (explicit)** | allowed | **in set (bug)** | not in set | | allow a (restricted) | no rule | allowed (default ACCEPT) | not in set | not in set | | allow a (restricted) | allow a (restricted) | allowed only for that rule | not in set | not in set | | allow a (restricted) | **allow all (explicit)** | allowed | **in set (bug)** | not in set | | allow all (explicit) | no rule | allowed (default ACCEPT) | **in set (bug)** | not in set | | allow all (explicit) | allow a (restricted) | allowed only for that rule | **in set (bug)** | not in set | | allow all (explicit) | allow all (explicit) | allowed | in set (correct) | in set (correct) | -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
