Hi, The current egress firewall rule feature by default BLOCK the all the outgoing traffic if there are no user configured rules.
I am proposing configurable option for the egress firewall rules using the Network offering. In network offering for firewall service provider, user can select egress default policy to allow/deny. Here is bug# https://issues.apache.org/jira/browse/CLOUDSTACK-1578 Please find below FS. https://cwiki.apache.org/confluence/display/CLOUDSTACK/Egress+firewall+rules+-+Ability+to+change+the+default Please provide your comments. Thanks, Jayapal