[CLOUDSTACK-9295] EGRESS left on ACCEPT on isolated network

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 4.8.0
• Component/s: Virtual Router
• Security Level: Public (Anyone can view this level - this is the default.)
• Labels: firewall virtualrouter vr
• Environment: CentOS 6 MGMT+HVs
• Assignee: Unassigned
• Reporter: Nux
• Created: 22/Feb/16 14:38
• Updated: 22/Feb/16 14:39

Description

When allowing 0.0.0.0/0 on EGRESS for "ALL" and then removing that, the rules are not properly cleaned, leaving the chain actually accepting all traffic!

Please see http://img.nux.ro/fP3-Selection_123.png