GitHub user wido opened a pull request: https://github.com/apache/cloudstack/pull/1713
CLOUDSTACK-9552: Allow egress TCP/53 implicitly in Basic Networking Allow DNS queries over TCP when egress filtering is configured. When using DNSSEC more and more queries are done over TCP and this requires 53/TCP to be allowed. Signed-off-by: Wido den Hollander <w...@widodh.nl> You can merge this pull request into a Git repository by running: $ git pull https://github.com/wido/cloudstack CLOUDSTACK-9552 Alternatively you can review and apply these changes as the patch at: https://github.com/apache/cloudstack/pull/1713.patch To close this pull request, make a commit to your master/trunk branch with (at least) the following in the commit message: This closes #1713 ---- commit 281cd713fdcbb2c825403e1cf80136841ee3fd8a Author: Wido den Hollander <w...@widodh.nl> Date: 2016-10-20T08:14:36Z CLOUDSTACK-9552: Allow egress TCP/53 implicitly in Basic Networking Allow DNS queries over TCP when egress filtering is configured. When using DNSSEC more and more queries are done over TCP and this requires 53/TCP to be allowed. Signed-off-by: Wido den Hollander <w...@widodh.nl> ---- --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled and wishes so, or if the feature is enabled but not working, please contact infrastructure at infrastruct...@apache.org or file a JIRA ticket with INFRA. ---