)]}'
{"id":"openstack%2Fneutron~299021","triplet_id":"openstack%2Fneutron~master~I39dc0e23fc118ede19ef2d986b29fc5a8e48ff78","project":"openstack/neutron","branch":"master","topic":"bug/1558658","hashtags":[],"change_id":"I39dc0e23fc118ede19ef2d986b29fc5a8e48ff78","subject":"Linux Bridge: Add mac spoofing filtering to ebtables","status":"MERGED","created":"2016-03-29 23:05:31.000000000","updated":"2016-04-05 12:48:20.000000000","submitted":"2016-04-05 12:48:19.000000000","submitter":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"meta_rev_id":"fb468616b5c6cbc9c214ce0d4e322ea8bc57a042","_number":299021,"virtual_id_number":299021,"owner":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"recommended":{"_account_id":5170,"name":"Microsoft Hyper-V CI","email":"hyper-v_ci@microsoft.com","username":"hyper-v-ci","tags":["SERVICE_USER"]},"all":[{"value":1,"date":"2016-03-29 23:47:12.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":10184,"name":"Nuage CI","email":"nuage-ci@nuagenetworks.net","username":"nuage-ci","tags":["SERVICE_USER"]},{"value":0,"_account_id":17130,"name":"melissaml","email":"ma.lei@99cloud.net","username":"malei"},{"value":0,"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},{"value":0,"_account_id":6788,"name":"Rossella Sblendido","email":"rsblendido@suse.com","username":"rossella-o"},{"value":0,"_account_id":8788,"name":"Miguel Angel Ajo","email":"mangelajo@redhat.com","username":"mangelajo"},{"value":0,"_account_id":11255,"name":"Dustin Lundquist","username":"dustin.lundquist","inactive":true},{"value":1,"date":"2016-03-30 00:22:18.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":5170,"name":"Microsoft Hyper-V CI","email":"hyper-v_ci@microsoft.com","username":"hyper-v-ci","tags":["SERVICE_USER"]},{"value":0,"_account_id":11682,"name":"Ryan Moats","email":"rmoats@us.ibm.com","username":"regXboi"},{"value":0,"date":"2016-03-30 00:28:26.000000000","permitted_voting_range":{"min":0,"max":1},"_account_id":14323,"name":"HP Networking CI","email":"hpnopenstackci@hp.com","username":"hpn"},{"value":2,"date":"2016-04-05 12:48:19.000000000","_account_id":3,"name":"Jenkins","username":"jenkins"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","value":1,"default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":6788,"name":"Rossella Sblendido","email":"rsblendido@suse.com","username":"rossella-o"},"recommended":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"all":[{"value":0,"_account_id":10184,"name":"Nuage CI","email":"nuage-ci@nuagenetworks.net","username":"nuage-ci","tags":["SERVICE_USER"]},{"value":1,"date":"2016-04-05 11:38:05.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":17130,"name":"melissaml","email":"ma.lei@99cloud.net","username":"malei"},{"value":1,"date":"2016-03-31 21:23:40.000000000","permitted_voting_range":{"min":1,"max":2},"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},{"value":2,"date":"2016-04-05 09:53:50.000000000","_account_id":6788,"name":"Rossella Sblendido","email":"rsblendido@suse.com","username":"rossella-o"},{"value":2,"date":"2016-04-05 11:36:02.000000000","_account_id":8788,"name":"Miguel Angel Ajo","email":"mangelajo@redhat.com","username":"mangelajo"},{"value":1,"date":"2016-03-31 19:16:30.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":11255,"name":"Dustin Lundquist","username":"dustin.lundquist","inactive":true},{"value":0,"_account_id":5170,"name":"Microsoft Hyper-V CI","email":"hyper-v_ci@microsoft.com","username":"hyper-v-ci","tags":["SERVICE_USER"]},{"value":1,"date":"2016-03-30 11:35:39.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":11682,"name":"Ryan Moats","email":"rmoats@us.ibm.com","username":"regXboi"},{"value":0,"_account_id":14323,"name":"HP Networking CI","email":"hpnopenstackci@hp.com","username":"hpn"},{"value":0,"_account_id":3,"name":"Jenkins","username":"jenkins"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","value":1,"default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":8788,"name":"Miguel Angel Ajo","email":"mangelajo@redhat.com","username":"mangelajo"},"all":[{"value":0,"_account_id":10184,"name":"Nuage CI","email":"nuage-ci@nuagenetworks.net","username":"nuage-ci","tags":["SERVICE_USER"]},{"value":0,"_account_id":17130,"name":"melissaml","email":"ma.lei@99cloud.net","username":"malei"},{"value":0,"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},{"value":0,"_account_id":6788,"name":"Rossella Sblendido","email":"rsblendido@suse.com","username":"rossella-o"},{"value":1,"date":"2016-04-05 11:36:07.000000000","_account_id":8788,"name":"Miguel Angel Ajo","email":"mangelajo@redhat.com","username":"mangelajo"},{"value":0,"_account_id":11255,"name":"Dustin Lundquist","username":"dustin.lundquist","inactive":true},{"value":0,"_account_id":5170,"name":"Microsoft Hyper-V CI","email":"hyper-v_ci@microsoft.com","username":"hyper-v-ci","tags":["SERVICE_USER"]},{"value":0,"_account_id":11682,"name":"Ryan Moats","email":"rmoats@us.ibm.com","username":"regXboi"},{"value":0,"_account_id":14323,"name":"HP Networking CI","email":"hpnopenstackci@hp.com","username":"hpn"},{"value":0,"_account_id":3,"name":"Jenkins","username":"jenkins"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true},"Review-Priority":{"all":[{"value":0,"_account_id":10184,"name":"Nuage CI","email":"nuage-ci@nuagenetworks.net","username":"nuage-ci","tags":["SERVICE_USER"]},{"value":0,"_account_id":17130,"name":"melissaml","email":"ma.lei@99cloud.net","username":"malei"},{"value":0,"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},{"value":0,"_account_id":6788,"name":"Rossella Sblendido","email":"rsblendido@suse.com","username":"rossella-o"},{"value":0,"_account_id":8788,"name":"Miguel Angel Ajo","email":"mangelajo@redhat.com","username":"mangelajo"},{"value":0,"_account_id":11255,"name":"Dustin Lundquist","username":"dustin.lundquist","inactive":true},{"value":0,"_account_id":5170,"name":"Microsoft Hyper-V CI","email":"hyper-v_ci@microsoft.com","username":"hyper-v-ci","tags":["SERVICE_USER"]},{"value":0,"_account_id":11682,"name":"Ryan Moats","email":"rmoats@us.ibm.com","username":"regXboi"},{"value":0,"_account_id":14323,"name":"HP Networking CI","email":"hpnopenstackci@hp.com","username":"hpn"},{"value":0,"_account_id":3,"name":"Jenkins","username":"jenkins"}],"values":{"-1":"Branch Freeze"," 0":"No Priority","+1":"Important Change","+2":"Gate Blocker Fix / Urgent Change"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":3,"name":"Jenkins","username":"jenkins"},{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},{"_account_id":5170,"name":"Microsoft Hyper-V CI","email":"hyper-v_ci@microsoft.com","username":"hyper-v-ci","tags":["SERVICE_USER"]},{"_account_id":6788,"name":"Rossella Sblendido","email":"rsblendido@suse.com","username":"rossella-o"},{"_account_id":8788,"name":"Miguel Angel Ajo","email":"mangelajo@redhat.com","username":"mangelajo"},{"_account_id":10184,"name":"Nuage CI","email":"nuage-ci@nuagenetworks.net","username":"nuage-ci","tags":["SERVICE_USER"]},{"_account_id":11255,"name":"Dustin Lundquist","username":"dustin.lundquist","inactive":true},{"_account_id":11682,"name":"Ryan Moats","email":"rmoats@us.ibm.com","username":"regXboi"},{"_account_id":14323,"name":"HP Networking CI","email":"hpnopenstackci@hp.com","username":"hpn"},{"_account_id":17130,"name":"melissaml","email":"ma.lei@99cloud.net","username":"malei"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2016-03-29 23:47:12.000000000","updated_by":{"_account_id":10184,"name":"Nuage CI","email":"nuage-ci@nuagenetworks.net","username":"nuage-ci","tags":["SERVICE_USER"]},"reviewer":{"_account_id":10184,"name":"Nuage CI","email":"nuage-ci@nuagenetworks.net","username":"nuage-ci","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2016-03-30 00:22:18.000000000","updated_by":{"_account_id":5170,"name":"Microsoft Hyper-V CI","email":"hyper-v_ci@microsoft.com","username":"hyper-v-ci","tags":["SERVICE_USER"]},"reviewer":{"_account_id":5170,"name":"Microsoft Hyper-V CI","email":"hyper-v_ci@microsoft.com","username":"hyper-v-ci","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2016-03-30 00:28:26.000000000","updated_by":{"_account_id":14323,"name":"HP Networking CI","email":"hpnopenstackci@hp.com","username":"hpn"},"reviewer":{"_account_id":14323,"name":"HP Networking CI","email":"hpnopenstackci@hp.com","username":"hpn"},"state":"REVIEWER"},{"updated":"2016-03-30 11:35:39.000000000","updated_by":{"_account_id":11682,"name":"Ryan Moats","email":"rmoats@us.ibm.com","username":"regXboi"},"reviewer":{"_account_id":11682,"name":"Ryan Moats","email":"rmoats@us.ibm.com","username":"regXboi"},"state":"REVIEWER"},{"updated":"2016-03-31 19:16:30.000000000","updated_by":{"_account_id":11255,"name":"Dustin Lundquist","username":"dustin.lundquist","inactive":true},"reviewer":{"_account_id":11255,"name":"Dustin Lundquist","username":"dustin.lundquist","inactive":true},"state":"REVIEWER"},{"updated":"2016-03-31 21:23:40.000000000","updated_by":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"reviewer":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"state":"REVIEWER"},{"updated":"2016-04-05 09:53:50.000000000","updated_by":{"_account_id":6788,"name":"Rossella Sblendido","email":"rsblendido@suse.com","username":"rossella-o"},"reviewer":{"_account_id":6788,"name":"Rossella Sblendido","email":"rsblendido@suse.com","username":"rossella-o"},"state":"REVIEWER"},{"updated":"2016-04-05 11:36:07.000000000","updated_by":{"_account_id":8788,"name":"Miguel Angel Ajo","email":"mangelajo@redhat.com","username":"mangelajo"},"reviewer":{"_account_id":8788,"name":"Miguel Angel Ajo","email":"mangelajo@redhat.com","username":"mangelajo"},"state":"REVIEWER"},{"updated":"2016-04-05 11:38:05.000000000","updated_by":{"_account_id":17130,"name":"melissaml","email":"ma.lei@99cloud.net","username":"malei"},"reviewer":{"_account_id":17130,"name":"melissaml","email":"ma.lei@99cloud.net","username":"malei"},"state":"REVIEWER"},{"updated":"2016-04-05 12:48:19.000000000","updated_by":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"reviewer":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"state":"REVIEWER"}],"messages":[{"id":"bd2db1c870c25e5fd9a41ed483eb23cc7ac9264d","author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"date":"2016-03-29 23:05:31.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"c517baf3038a6de577ee1d14711b331c3d88f807","author":{"_account_id":11255,"name":"Dustin Lundquist","username":"dustin.lundquist","inactive":true},"date":"2016-03-29 23:16:59.000000000","message":"Patch Set 1: Code-Review+1","accounts_in_message":[],"_revision_number":1},{"id":"e0871a9e9126058d027e0370965d9c596a21d59b","author":{"_account_id":14208,"name":"Cisco CI","email":"ml2.ci@cisco.com","username":"cisco_ml2_ci","tags":["SERVICE_USER"]},"date":"2016-03-29 23:28:01.000000000","message":"Patch Set 1:\n\nBuild succeeded.\n\n- ml2-nexus http://192.133.158.2:8080/job/ml2-nexus/18814 : SUCCESS in 22m 13s\n- python27 http://192.133.158.2:8080/job/python27/11163 : SUCCESS in 15m 06s (non-voting)\n- n1kv-ml2 http://192.133.158.2:8080/job/n1kv-ml2/9672 : SUCCESS in 15m 53s\n- tailf-ncs http://192.133.158.2:8080/job/tailf-ncs/15221 : SUCCESS in 13m 11s","accounts_in_message":[],"_revision_number":1},{"id":"27ff82d13dcdb9e35ef8d7beacf1f1a81195e5f6","author":{"_account_id":15752,"name":"Intel SR-IOV CI","email":"sriov-ci@intel.com","username":"sriovci","tags":["SERVICE_USER"]},"date":"2016-03-29 23:29:38.000000000","message":"Patch Set 1:\n\n* sriov-test http://52.27.155.124/sriov/299021/1 : SUCCESS","accounts_in_message":[],"_revision_number":1},{"id":"19acbf26320d3e124137c3031fa85278c8a4d154","author":{"_account_id":10386,"name":"OpenDaylight CI","email":"odl-openstack@opendaylight.org","username":"odl-jenkins","tags":["SERVICE_USER"]},"date":"2016-03-29 23:46:04.000000000","message":"Patch Set 1:\n\nBuild Successful \n\nhttps://jenkins.opendaylight.org/releng/job/ovsdb-openstack-gerrit/9824/ : SUCCESS For more information on OpenDaylight CI, visit https://wiki.openstack.org/wiki/ThirdPartySystems/OpenDaylight_CI","accounts_in_message":[],"_revision_number":1},{"id":"f09a55f605da009101b576827610fdf890797b66","author":{"_account_id":10184,"name":"Nuage CI","email":"nuage-ci@nuagenetworks.net","username":"nuage-ci","tags":["SERVICE_USER"]},"date":"2016-03-29 23:47:12.000000000","message":"Patch Set 1: Verified+1\n\nTests succeeded\n\n- Nuage-Plugin http://67.205.21.138/nuagecilogs/21_299021_1_20160329160540 : SUCCESS","accounts_in_message":[],"_revision_number":1},{"id":"31a2aaeb27b9b9aa8c585a5799b8d411f1656056","author":{"_account_id":14571,"name":"Intel Experimental CI","email":"openstack-networking-ci@intel.com","username":"intel-networking-ci","tags":["SERVICE_USER"]},"date":"2016-03-29 23:48:35.000000000","message":"Patch Set 1:\n\nBuild Successful.\n* check-tempest-networking http://intel-openstack-ci-logs.ovh/networking-ci/refs/changes/21/299021/1 : SUCCESS\n\nTo re-run the job please post a comment with `intel-networking-ci recheck`","accounts_in_message":[],"_revision_number":1},{"id":"a171907374e6451f423b899a6f70af199481536f","author":{"_account_id":5170,"name":"Microsoft Hyper-V CI","email":"hyper-v_ci@microsoft.com","username":"hyper-v-ci","tags":["SERVICE_USER"]},"date":"2016-03-30 00:22:18.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded.\n\n- neutron-dvsm-tempest http://64.119.130.115/neutron/299021/1/ : SUCCESS in 1h 16m 25s","accounts_in_message":[],"_revision_number":1},{"id":"0795abc2ad3d85c66f2e274face36645dedf5bc9","author":{"_account_id":14323,"name":"HP Networking CI","email":"hpnopenstackci@hp.com","username":"hpn"},"date":"2016-03-30 00:28:26.000000000","message":"Patch Set 1:\n\nBuild Successful :If you want to trigger a recheck for this patch please enter the comment with recheck-hpnetworkingci keyword\n\n- hp-neutron-l2-gateway http://168.61.172.214/L2GW/5311/299021/be298f8bc35e6d006c7a9361e42755c9d6790e1e/ : SUCCESS","accounts_in_message":[],"_revision_number":1},{"id":"88a2c461b1eef7fb6a94eb6153cfe43537775491","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2016-03-30 01:15:20.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\n\n- gate-neutron-docs http://docs-draft.openstack.org/21/299021/1/check/gate-neutron-docs/1090c1d//doc/build/html/ : SUCCESS in 3m 15s\n- gate-neutron-pep8 http://logs.openstack.org/21/299021/1/check/gate-neutron-pep8/6cf12a4/ : SUCCESS in 5m 42s\n- gate-neutron-python27 http://logs.openstack.org/21/299021/1/check/gate-neutron-python27/a27282a/ : SUCCESS in 13m 08s\n- gate-neutron-python34 http://logs.openstack.org/21/299021/1/check/gate-neutron-python34/d6ccf06/ : SUCCESS in 15m 53s\n- gate-tempest-dsvm-neutron-full http://logs.openstack.org/21/299021/1/check/gate-tempest-dsvm-neutron-full/5acf326/ : SUCCESS in 1h 02m 59s\n- gate-grenade-dsvm-neutron http://logs.openstack.org/21/299021/1/check/gate-grenade-dsvm-neutron/45da42d/ : SUCCESS in 33m 59s\n- gate-neutron-dsvm-api http://logs.openstack.org/21/299021/1/check/gate-neutron-dsvm-api/b4e85d3/ : SUCCESS in 34m 51s\n- gate-neutron-dsvm-functional http://logs.openstack.org/21/299021/1/check/gate-neutron-dsvm-functional/489570f/ : SUCCESS in 13m 58s\n- gate-neutron-dsvm-fullstack http://logs.openstack.org/21/299021/1/check/gate-neutron-dsvm-fullstack/f70a789/ : FAILURE in 7m 31s (non-voting)\n- gate-rally-dsvm-neutron-neutron http://logs.openstack.org/21/299021/1/check/gate-rally-dsvm-neutron-neutron/e5ea165/ : SUCCESS in 1h 14m 18s (non-voting)\n- gate-tempest-dsvm-neutron-dvr http://logs.openstack.org/21/299021/1/check/gate-tempest-dsvm-neutron-dvr/cd11986/ : SUCCESS in 1h 43m 59s\n- gate-tempest-dsvm-neutron-identity-v3-only-full-nv http://logs.openstack.org/21/299021/1/check/gate-tempest-dsvm-neutron-identity-v3-only-full-nv/1cb945f/ : SUCCESS in 57m 24s (non-voting)\n- gate-tempest-dsvm-neutron-linuxbridge http://logs.openstack.org/21/299021/1/check/gate-tempest-dsvm-neutron-linuxbridge/510b100/ : SUCCESS in 52m 45s\n- gate-tempest-dsvm-neutron-pg-full http://logs.openstack.org/21/299021/1/check/gate-tempest-dsvm-neutron-pg-full/cc7ca2c/ : SUCCESS in 55m 30s (non-voting)\n- gate-neutron-lbaasv2-dsvm-minimal http://logs.openstack.org/21/299021/1/check/gate-neutron-lbaasv2-dsvm-minimal/d145e3c/ : SUCCESS in 33m 07s\n- gate-grenade-dsvm-neutron-multinode http://logs.openstack.org/21/299021/1/check/gate-grenade-dsvm-neutron-multinode/25bfb26/ : SUCCESS in 39m 54s (non-voting)\n- gate-tempest-dsvm-neutron-multinode-full http://logs.openstack.org/21/299021/1/check/gate-tempest-dsvm-neutron-multinode-full/8654c11/ : SUCCESS in 1h 28m 16s (non-voting)\n- gate-tempest-dsvm-neutron-dvr-multinode-full http://logs.openstack.org/21/299021/1/check/gate-tempest-dsvm-neutron-dvr-multinode-full/15bcc51/ : FAILURE in 12m 18s (non-voting)\n- gate-tempest-dsvm-ironic-pxe_ipa-nv http://logs.openstack.org/21/299021/1/check/gate-tempest-dsvm-ironic-pxe_ipa-nv/873655d/ : SUCCESS in 44m 15s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"44cc89ab530d6aa35c5d8aa6634cc6702c557f16","author":{"_account_id":11682,"name":"Ryan Moats","email":"rmoats@us.ibm.com","username":"regXboi"},"date":"2016-03-30 11:35:39.000000000","message":"Patch Set 1: Code-Review+1","accounts_in_message":[],"_revision_number":1},{"id":"12ec58f0391d280a44a0b844ad31b2b6d0471892","author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"date":"2016-03-31 13:53:25.000000000","message":"Patch Set 1:\n\nSo can the iptables code be removed now?  It doesn\u0027t have to be done here.","accounts_in_message":[],"_revision_number":1},{"id":"0ce4b90be44d4f90bb8ef676d8e4cc575f14f161","author":{"_account_id":11255,"name":"Dustin Lundquist","username":"dustin.lundquist","inactive":true},"date":"2016-03-31 15:50:15.000000000","message":"Patch Set 1: -Code-Review\n\n@Brian Haley, The MAC matching portion of the IPtables code could now be removed -- although this would permit an instance to use any MAC address with any IP address so long as they where both permitted. I\u0027m not sure if this aligns well with the allowed-address-pairs original intent, but this doesn\u0027t seem to be a security issue.\n\nThis resolved the MAC address spoofing issue in #1558658, but not the IP spoofing component of that bug or ICMPv6 spoofing reported in #1502933.","accounts_in_message":[],"_revision_number":1},{"id":"a6a427844a0db0c32a90b041f37a4e42cc616f8f","author":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"date":"2016-03-31 19:12:44.000000000","message":"Patch Set 1:\n\nRight, we can look at removing the iptables level code, but it would change the behavior to allow any combination of MAC+IP. Something to maybe discuss in a follow-up patch.","accounts_in_message":[],"_revision_number":1},{"id":"7188d1c481acdc374fd38ffa7c86e8a3720a6f3d","author":{"_account_id":11255,"name":"Dustin Lundquist","username":"dustin.lundquist","inactive":true},"date":"2016-03-31 19:16:30.000000000","message":"Patch Set 1: Code-Review+1\n\n@Kevin Benton, agreed. Let\u0027s get this MAC spoofing prevention fixed first.","accounts_in_message":[],"_revision_number":1},{"id":"c279199ccabf015f256fb922cf7f2458ff7ef73f","author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"date":"2016-03-31 21:23:40.000000000","message":"Patch Set 1: Code-Review+1","accounts_in_message":[],"_revision_number":1},{"id":"e8564f7a27a62a2cbf9971a48621c58bf171bdff","author":{"_account_id":6788,"name":"Rossella Sblendido","email":"rsblendido@suse.com","username":"rossella-o"},"date":"2016-04-05 09:53:50.000000000","message":"Patch Set 1: Code-Review+2\n\nGreat job Kevin, thanks!","accounts_in_message":[],"_revision_number":1},{"id":"7fc4a290558a03e752c28b40af5307c6bf8807dc","author":{"_account_id":8788,"name":"Miguel Angel Ajo","email":"mangelajo@redhat.com","username":"mangelajo"},"date":"2016-04-05 11:36:02.000000000","message":"Patch Set 1: Code-Review+2\n\nThis one looks good to me.","accounts_in_message":[],"_revision_number":1},{"id":"0cdb1dc737428c7212591ad7cc8be131e68dcbdd","author":{"_account_id":8788,"name":"Miguel Angel Ajo","email":"mangelajo@redhat.com","username":"mangelajo"},"date":"2016-04-05 11:36:07.000000000","message":"Patch Set 1: Workflow+1","accounts_in_message":[],"_revision_number":1},{"id":"400e24c3d84b8ca3d63226829d86eeb7236c7c3d","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2016-04-05 11:36:13.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.\nhttp://status.openstack.org/zuul/","accounts_in_message":[],"_revision_number":1},{"id":"151dd2507f7bd806edc32b700b502e6ff4d011b7","author":{"_account_id":17130,"name":"melissaml","email":"ma.lei@99cloud.net","username":"malei"},"date":"2016-04-05 11:38:05.000000000","message":"Patch Set 1: Code-Review+1","accounts_in_message":[],"_revision_number":1},{"id":"8acf685c4a2cff1f926a49100ce96b822362a135","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2016-04-05 12:48:19.000000000","message":"Patch Set 1: Verified+2\n\nBuild succeeded (gate pipeline).\n\n- gate-neutron-docs http://docs-draft.openstack.org/21/299021/1/gate/gate-neutron-docs/af18050//doc/build/html/ : SUCCESS in 2m 44s\n- gate-neutron-pep8 http://logs.openstack.org/21/299021/1/gate/gate-neutron-pep8/71fe810/ : SUCCESS in 7m 18s\n- gate-neutron-python27 http://logs.openstack.org/21/299021/1/gate/gate-neutron-python27/302d862/ : SUCCESS in 14m 17s\n- gate-neutron-python34 http://logs.openstack.org/21/299021/1/gate/gate-neutron-python34/c556d9c/ : SUCCESS in 11m 27s\n- gate-tempest-dsvm-neutron-full http://logs.openstack.org/21/299021/1/gate/gate-tempest-dsvm-neutron-full/97b77f3/ : SUCCESS in 59m 57s\n- gate-grenade-dsvm-neutron http://logs.openstack.org/21/299021/1/gate/gate-grenade-dsvm-neutron/857262a/ : SUCCESS in 36m 53s\n- gate-neutron-dsvm-api http://logs.openstack.org/21/299021/1/gate/gate-neutron-dsvm-api/eb89306/ : SUCCESS in 37m 02s\n- gate-tempest-dsvm-neutron-linuxbridge http://logs.openstack.org/21/299021/1/gate/gate-tempest-dsvm-neutron-linuxbridge/e2456c1/ : SUCCESS in 1h 07m 13s","accounts_in_message":[],"_revision_number":1},{"id":"49d1ed59232ac72c8aaecf2446490ce0e5653c63","date":"2016-04-05 12:48:20.000000000","message":"Change has been successfully merged into the git repository by Jenkins","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"be298f8bc35e6d006c7a9361e42755c9d6790e1e","revisions":{"be298f8bc35e6d006c7a9361e42755c9d6790e1e":{"kind":"REWORK","_number":1,"created":"2016-03-29 23:05:31.000000000","uploader":{"_account_id":7787,"name":"Kevin Benton","email":"kevin@benton.pub","username":"blak111"},"ref":"refs/changes/21/299021/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/neutron","ref":"refs/changes/21/299021/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/neutron refs/changes/21/299021/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/neutron refs/changes/21/299021/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/neutron refs/changes/21/299021/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/neutron refs/changes/21/299021/1"}}},"commit":{"parents":[{"commit":"ab614a10a76c21dc1f4db172d9b550b3402ecd40","subject":"Merge \"Make L3 HA interface creation concurrency safe\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/neutron/commit/ab614a10a76c21dc1f4db172d9b550b3402ecd40"}]}],"author":{"name":"Kevin Benton","email":"kevin@benton.pub","date":"2016-03-25 09:45:11.000000000","tz":-420},"committer":{"name":"Kevin Benton","email":"kevin@benton.pub","date":"2016-03-29 03:46:24.000000000","tz":-420},"subject":"Linux Bridge: Add mac spoofing filtering to ebtables","message":"Linux Bridge: Add mac spoofing filtering to ebtables\n\nThe current mac-spoofing code in iptables has two issues.\nFirst, it occurs after the address discovery allow rules\n(e.g. DHCP), so MAC addresses can be spoofed on discovery\nprotocols. Second, since it is based on iptables, it\ndoesn\u0027t apply to protocols like STP.\n\nThis means a VM could generate one of these types of packets\nwith a spoofed MAC address to trick switches into learning\nthat the spoofed MAC now belongs to the VM\u0027s port. The impact\nof this depends on the configuration of the environment\n(e.g. use of L2pop: see the bug report for details).\n\nThis patch adds MAC spoofing filtering to the ARP protection\ncode for Linux bridge based on ebtables. Only traffic sourced\nfrom the MAC address on the port or in the allowed address\npair MACs will be allowed.\n\nThis filtering will not be enabled if the port has port\nsecurity disabled or if the device_owner starts with \u0027network:\u0027.\n\nChange-Id: I39dc0e23fc118ede19ef2d986b29fc5a8e48ff78\nPartial-Bug: #1558658\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/neutron/commit/be298f8bc35e6d006c7a9361e42755c9d6790e1e"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/neutron/commit/be298f8bc35e6d006c7a9361e42755c9d6790e1e"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[],"submit_requirements":[]}
