[ https://issues.apache.org/jira/browse/CLOUDSTACK-5144?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jayapal Reddy reassigned CLOUDSTACK-5144: ----------------------------------------- Assignee: Gaurav Aradhye (was: Jayapal Reddy) Hi, It is a regression. I don't think the code around SG ingress rules is changed. Can you please check your setup, if you still see the issue attach host iptables rules. Thanks, Jayapal > Basic Zone Security Groups - SSH to VM is allowed even when there is no > ingress rule defined for the security group > ------------------------------------------------------------------------------------------------------------------- > > Key: CLOUDSTACK-5144 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-5144 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: Network Controller > Affects Versions: 4.3.0 > Reporter: Gaurav Aradhye > Assignee: Gaurav Aradhye > Priority: Critical > Fix For: 4.3.0 > > > In Basic Zone Setup: > 1. Create an account > 2. Deploy a VM in that account > 3. Verify that any ingress rule is not defined for the security group > belonging to the account > 4. Try SSH to VM using the nic ipaddress from external client > SSH is successful to the VM where as it should fail when the ingress rule is > not defined. -- This message was sent by Atlassian JIRA (v6.1#6144)