Explorar o código

Do not allow accidental opening traffic.

Prevent the user to open traffic from the world, accidentally, by not
explicitly specifying the source.
chiniforooshan %!s(int64=10) %!d(string=hai) anos
pai
achega
a3e97b941b
Modificáronse 1 ficheiros con 4 adicións e 0 borrados
  1. 4 0
      cloudbridge/cloud/providers/gce/resources.py

+ 4 - 0
cloudbridge/cloud/providers/gce/resources.py

@@ -220,6 +220,10 @@ class GCEFirewallsDelegate(object):
         if self.find_firewall(tag, ip_protocol, port, source_range,
                               source_tag) is not None:
             return True
+        # Do not let the user accidentally open traffic from the world by not
+        # explicitly specifying the source.
+        if source_tag is None and source_range is None:
+            return False
         firewall_number = 1
         suffixes = []
         for firewall in self.iter_firewalls(tag):