Attachment 942717 Details for Bug 1144181 – iptables -L ( during issue )

iptables -L ( during issue )

iptables_neutron_noconnect_sql.txt (text/plain), 4.86 KB, created by Thomas Chacko on 2014-09-30 13:39:05 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Thomas Chacko

Created: 2014-09-30 13:39:05 UTC

Size: 4.86 KB

patch

obsolete

>Chain INPUT (policy ACCEPT)
>target     prot opt source               destination         
>nova-api-INPUT  all  --  anywhere             anywhere            
>ACCEPT     tcp  --  xCentStack           anywhere             multiport dports amqps,amqp /* 001 amqp incoming amqp_192.168.0.20 */
>ACCEPT     tcp  --  anywhere             anywhere             multiport dports 8777 /* 001 ceilometer-api incoming ceilometer_api */
>ACCEPT     tcp  --  xCentStack           anywhere             multiport dports iscsi-target /* 001 cinder incoming cinder_192.168.0.20 */
>ACCEPT     tcp  --  anywhere             anywhere             multiport dports 8776 /* 001 cinder-api incoming cinder_API */
>ACCEPT     tcp  --  anywhere             anywhere             multiport dports armtechdaemon /* 001 glance incoming glance_API */
>ACCEPT     tcp  --  anywhere             anywhere             multiport dports http /* 001 horizon 80  incoming */
>ACCEPT     tcp  --  anywhere             anywhere             multiport dports commplex-main,openstack-id /* 001 keystone incoming keystone */
>ACCEPT     tcp  --  xCentStack           anywhere             multiport dports 27017 /* 001 mongodb-server incoming swift_storage_and_rsync_192.168.0.20 */
>ACCEPT     tcp  --  xCentStack           anywhere             multiport dports mysql /* 001 mysql incoming mysql_192.168.0.20 */
>ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:mysql
>ACCEPT     tcp  --  anywhere             anywhere             multiport dports http /* 001 nagios incoming */
>ACCEPT     tcp  --  xCentStack           anywhere             multiport dports 5666 /* 001 nagios-nrpe incoming nagios_nrpe */
>ACCEPT     udp  --  anywhere             anywhere             multiport dports bootps /* 001 neutron dhcp in:  incoming neutron_dhcp_in_192.168.0.20 */
>ACCEPT     tcp  --  anywhere             anywhere             multiport dports 9696 /* 001 neutron server incoming neutron_server_192.168.0.20 */
>ACCEPT     udp  --  anywhere             anywhere             multiport dports 4789 /* 001 neutron tunnel port incoming neutron_tunnel */
>ACCEPT     tcp  --  anywhere             anywhere             multiport dports 8773,8774,8775 /* 001 nova api incoming nova_api */
>ACCEPT     tcp  --  xCentStack           anywhere             multiport dports rfb:cvsup /* 001 nova compute incoming nova_compute */
>ACCEPT     tcp  --  xCentStack           anywhere             multiport dports 16509,49152:49215 /* 001 nova qemu migration incoming nova_qemu_migration_192.168.0.20_192.168.0.20 */
>ACCEPT     tcp  --  anywhere             anywhere             multiport dports 6080 /* 001 novncproxy incoming */
>ACCEPT     tcp  --  anywhere             anywhere             multiport dports webcache /* 001 swift proxy incoming swift_proxy */
>ACCEPT     tcp  --  xCentStack           anywhere             multiport dports x11,6001,6002,rsync /* 001 swift storage and rsync incoming swift_storage_and_rsync_192.168.0.20 */
>ACCEPT     all  --  anywhere             anywhere             state RELATED,ESTABLISHED
>ACCEPT     icmp --  anywhere             anywhere            
>ACCEPT     all  --  anywhere             anywhere            
>ACCEPT     tcp  --  anywhere             anywhere             state NEW tcp dpt:ssh
>ACCEPT     tcp  --  anywhere             anywhere             state NEW tcp dpt:http
>ACCEPT     tcp  --  anywhere             anywhere             state NEW tcp dpt:webcache
>ACCEPT     tcp  --  anywhere             anywhere             state NEW tcp dpt:ndmp
>REJECT     all  --  anywhere             anywhere             reject-with icmp-host-prohibited
>
>Chain FORWARD (policy ACCEPT)
>target     prot opt source               destination         
>nova-filter-top  all  --  anywhere             anywhere            
>nova-api-FORWARD  all  --  anywhere             anywhere            
>REJECT     all  --  anywhere             anywhere             reject-with icmp-host-prohibited
>
>Chain OUTPUT (policy ACCEPT)
>target     prot opt source               destination         
>nova-filter-top  all  --  anywhere             anywhere            
>nova-api-OUTPUT  all  --  anywhere             anywhere            
>ACCEPT     udp  --  anywhere             anywhere             multiport dports bootpc /* 001 neutron dhcp out:  outgoing neutron_dhcp_out_192.168.0.20 */
>
>Chain nova-api-FORWARD (1 references)
>target     prot opt source               destination         
>
>Chain nova-api-INPUT (1 references)
>target     prot opt source               destination         
>ACCEPT     tcp  --  anywhere             xCentStack           tcp dpt:8775
>
>Chain nova-api-OUTPUT (1 references)
>target     prot opt source               destination         
>
>Chain nova-api-local (1 references)
>target     prot opt source               destination         
>
>Chain nova-filter-top (2 references)
>target     prot opt source               destination         
>nova-api-local  all  --  anywhere             anywhere

Actions: View

Attachments on bug 1144181: 939050 | 942717 | 942718 | 942719 | 942907 | 942908