Turbo Fredriksson <tu...@bayour.com> wrote on 07/06/2016 07:29:48 AM:

> Ok, I managed to get this working as well. Was quite
> simple actually.
> 
> But how do I _STOP_ this from happening?? If there's a root
> user on the [local] network, they can simply add that route.
> But in some cases I'd like to make sure that this DOESN'T work!
> 
> 
> Is there some configuration I can do in either the router or
> in Openstack to make sure that traffic from the outside can't
> be routed in to the instance(s)?
> 
> I'd like that to happen ONLY if there's a floating IP for the
> host..

Floating IP for the host?  Those are usually for the guest.

Have you looked at Neutron's FWaaS?

Regards,
Mike



_______________________________________________
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to     : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Reply via email to