[ 
https://issues.apache.org/jira/browse/CLOUDSTACK-6432?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15439086#comment-15439086
 ] 

ASF GitHub Bot commented on CLOUDSTACK-6432:
--------------------------------------------

Github user rhtyd commented on the issue:

    https://github.com/apache/cloudstack/pull/1663
  
    New smoke test result:
    
    $ nosetests --with-xunit --xunit-file=integration-test-results.xml 
--with-marvin --marvin-config=/home/bhaisaab/Lab/apache/marvin-cfgs/adv-kvm.cfg 
-s -a tags=advanced,required_hardware=true --zone=KVM-advzone --hypervisor=KVM  
test_router_dns.py
    
    ==== Marvin Init Started ====
    
    === Marvin Parse Config Successful ===
    
    === Marvin Setting TestData Successful===
    
    ==== Log Folder Path: /tmp//MarvinLogs//Aug_26_2016_19_25_30_U977TH. All 
logs will be available here ====
    
    === Marvin Init Logging Successful===
    
    ==== Marvin Init Successful ====
    Creating Admin Account for domain db10a868-6b7a-11e6-863f-a434d91cd37e on 
zone d7eb01c3-f5e4-4643-ae8a-14372778ffb4
    Creating Service Offering on zone d7eb01c3-f5e4-4643-ae8a-14372778ffb4
    Creating Network Offering on zone d7eb01c3-f5e4-4643-ae8a-14372778ffb4
    Creating Network for Account test-a-TestRouterDns-64PRTV using offering 
4a0b3e7e-c585-4b96-8040-736161597b62
    Creating guest VM for Account test-a-TestRouterDns-64PRTV using offering 
1e1db335-c2e0-48b2-a288-9adf88a10adb
    Starting test_router_dns_externalips...
    Querying VR DNS IP: 192.168.20.18
    VR DNS query failed from non-guest network IP as expected
    === TestName: test_router_dns_externalipquery | Status : SUCCESS ===
    
    Starting test_router_dns_guestipquery...
    Creating Firewall rule for VM ID: b00b68b8-9445-4925-a631-f4bbd54bc6b9
    Creating NAT rule for VM ID: b00b68b8-9445-4925-a631-f4bbd54bc6b9
    SSH into guest VM with IP: 192.168.20.18
    ====Trying SSH Connection: Host:192.168.20.18 User:root                     
              Port:22 RetryCnt:8===
    SshClient: Exception under createConnection: ['Traceback (most recent call 
last):\n', '  File 
"/usr/local/lib/python2.7/dist-packages/marvin/sshClient.py", line 122, in 
createConnection\n    allow_agent=False)\n', '  File 
"/usr/local/lib/python2.7/dist-packages/paramiko/client.py", line 324, in 
connect\n    raise NoValidConnectionsError(errors)\n', 
'NoValidConnectionsError: [Errno None] Unable to connect to port 22 on 
192.168.20.18\n']
    Traceback (most recent call last):
      File "/usr/local/lib/python2.7/dist-packages/marvin/sshClient.py", line 
122, in createConnection
        allow_agent=False)
      File "/usr/local/lib/python2.7/dist-packages/paramiko/client.py", line 
324, in connect
        raise NoValidConnectionsError(errors)
    NoValidConnectionsError: [Errno None] Unable to connect to port 22 on 
192.168.20.18
    ====Trying SSH Connection: Host:192.168.20.18 User:root                     
              Port:22 RetryCnt:7===
    SshClient: Exception under createConnection: ['Traceback (most recent call 
last):\n', '  File 
"/usr/local/lib/python2.7/dist-packages/marvin/sshClient.py", line 122, in 
createConnection\n    allow_agent=False)\n', '  File 
"/usr/local/lib/python2.7/dist-packages/paramiko/client.py", line 324, in 
connect\n    raise NoValidConnectionsError(errors)\n', 
'NoValidConnectionsError: [Errno None] Unable to connect to port 22 on 
192.168.20.18\n']
    Traceback (most recent call last):
      File "/usr/local/lib/python2.7/dist-packages/marvin/sshClient.py", line 
122, in createConnection
        allow_agent=False)
      File "/usr/local/lib/python2.7/dist-packages/paramiko/client.py", line 
324, in connect
        raise NoValidConnectionsError(errors)
    NoValidConnectionsError: [Errno None] Unable to connect to port 22 on 
192.168.20.18
    ====Trying SSH Connection: Host:192.168.20.18 User:root                     
              Port:22 RetryCnt:6===
    SshClient: Exception under createConnection: ['Traceback (most recent call 
last):\n', '  File 
"/usr/local/lib/python2.7/dist-packages/marvin/sshClient.py", line 122, in 
createConnection\n    allow_agent=False)\n', '  File 
"/usr/local/lib/python2.7/dist-packages/paramiko/client.py", line 324, in 
connect\n    raise NoValidConnectionsError(errors)\n', 
'NoValidConnectionsError: [Errno None] Unable to connect to port 22 on 
192.168.20.18\n']
    Traceback (most recent call last):
      File "/usr/local/lib/python2.7/dist-packages/marvin/sshClient.py", line 
122, in createConnection
        allow_agent=False)
      File "/usr/local/lib/python2.7/dist-packages/paramiko/client.py", line 
324, in connect
        raise NoValidConnectionsError(errors)
    NoValidConnectionsError: [Errno None] Unable to connect to port 22 on 
192.168.20.18
    
    ====Trying SSH Connection: Host:192.168.20.18 User:root                     
              Port:22 RetryCnt:5===
    ===SSH to Host 192.168.20.18 port : 22 SUCCESSFUL===
    {Cmd: nslookup google.com via Host: 192.168.20.18} {returns: 
[u'Server:\t\t10.1.1.1', u'Address:\t10.1.1.1#53', u'', u'Non-authoritative 
answer:', u'Name:\tgoogle.com', u'Address: 216.58.199.142', u'']}
    SSH nslookup result: [u'Server:\t\t10.1.1.1', u'Address:\t10.1.1.1#53', 
u'', u'Non-authoritative answer:', u'Name:\tgoogle.com', u'Address: 
216.58.199.142', u'']
    === TestName: test_router_dns_guestipquery | Status : SUCCESS ===


> Prevent VR from response to DNS request from outside of network
> ---------------------------------------------------------------
>
>                 Key: CLOUDSTACK-6432
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-6432
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the 
> default.) 
>    Affects Versions: 4.4.0, 4.5.0
>            Reporter: Sheng Yang
>            Assignee: Sheng Yang
>             Fix For: 4.4.0, 4.5.0
>
>
> In basic and shared network, VR use private network nic for dhcp/dns 
> services. But if private network is on the internet as well, it would make VR 
> facing outside network.
> We would restrain the VR DNS service inside CloudStack managed network.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to