https://issues.apache.org/jira/browse/CLOUDSTACK-9295
On isolated networks, when allowing 0.0.0.0/0 on EGRESS for "ALL" and then removing that, the rules are not properly cleaned, leaving the chain actually accepting all traffic! Please see http://img.nux.ro/fP3-Selection_123.png -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro
