[ https://issues.apache.org/jira/browse/CLOUDSTACK-5144?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jayapal Reddy reassigned CLOUDSTACK-5144: ----------------------------------------- Assignee: Gaurav Aradhye (was: Jayapal Reddy) Please attach MS, agent logs and host iptables rules (iptables -L -nv) output. > [Automation]: Basic Zone Security Groups - SSH to VM is allowed even when > there is no ingress rule defined for the security group > --------------------------------------------------------------------------------------------------------------------------------- > > Key: CLOUDSTACK-5144 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-5144 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: Network Controller > Affects Versions: 4.3.0 > Reporter: Gaurav Aradhye > Assignee: Gaurav Aradhye > Priority: Critical > Labels: automation > Fix For: 4.3.0 > > > In Basic Zone Setup: > 1. Create an account > 2. Deploy a VM in that account > 3. Verify that any ingress rule is not defined for the security group > belonging to the account > 4. Try SSH to VM using the nic ipaddress from external client > SSH is successful to the VM where as it should fail when the ingress rule is > not defined. -- This message was sent by Atlassian JIRA (v6.1.4#6159)