Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
caclmgrd: Don't block traffic to mgmt by default
*Currently the IP2ME rules block the management interface's identity address instead of the actual host address. This logic results in a DROP rule that hits the management interface address only in the case of /32 netmask - all other netmasks will result in traffic being accepted by default. Thus, it is exceedingly likely that the current DROP rule has never worked for management interfaces given that /32 are mainly loopback addresses, not for network links.
- Loading branch information