barbier security group

Nova and neutron are OK, but still feel good with neutron.Import Neutronclient.v2_0.client as NeclientNeutron = neclient. Client (username= ' admin ', password= ' password ', tenant_name= ' admin ', auth_url= ' http://ip:5000/v2.0 ') S1 = Neutron.create_security_group (body={' security_group ': {' name ': ' Block '}}) for r in s1[' Security_group '] [' security_ Group_rules ']: Neutron.delete_security_group_rule (security_group_rule=r[' id ')) SGS = Neutron.list_security_groups ( ) [' security_g

Role: Use this policy to uniformly configure firewalls for computers within a domain.For example: Open, close a port, block, allow program Access and other functions.650) this.width=650; "Src=" Http://s1.51cto.com/wyfs02/M01/88/F1/wKiom1gBiJiAJ00EAAEUyCs-qIo020.png-wh_500x0-wm_3 -wmp_4-s_3167541125.png "title=" 1.png "alt=" Wkiom1gbijiaj00eaaeuycs-qio020.png-wh_50 "/>Create the rules on the inside as needed, and the operation method is equivalent to setting the local fire wall.This article is fr

It is designed to set up a whitelist for accesses to the host machine and virtual machine, and only allow access from the IP address specified by the company Create an IP address whitelist Ipset create whitelist hash: Net Ipset add whitelist 10.0.1.52 Ipset add whitelist 10.0.1.142 Import forward and input to the custom chain Iptables-N custom Virtual machines affected Iptables-a forward-M physdev -- physdev-In em3-J custom Host affected Iptables-A input-I br0-J custom Access is denied exc