Restrictions on ingress CIDR for unknown ports

[SteveL1]

Hi,

I'm trying to create a scenario that passes a security group that has a /0 ingress for known ports (eg 80/443) but fails if any other port has a range of less than /8.

is that possible to do?

[eerkunt]

Hi Steve,

This is not specific to a network right ? It is just the netmask, as I understand ?

So you are not looking for 10.0.0.0/8 (or any other /8 network) but specifically any network with /8 cidr ?

[SteveL1]

Hi,

A specific network would be nice but for now just looking at netmask would be great.

Thanks :)

[eerkunt]

Ok then, that requires a new step :) I will change this issue as a Feature Request and implement it as soon as possible. I think this is a good idea.

Currently you can achieve this for a specific network, but just pure netmask is not supported till it is implemented :)

Few more days please :)

[SteveL1]

That's great, thanks for replying so quickly.

I was looking at using regex - something like

Then it must not have tcp protocol and port 0-65535 for "^([0-9]{1,3}\.){3}[0-9]{1,3}(\/([0-9]|[1-2][0-9]|3[0-2]))?$" regex

But I couldn't get it working. Also, I don't know how to get both parts (for the known and unknown ports) to work as one feature.

thanks :)

[eerkunt]

Unfortunately regex are not supported on that step, but that is another good idea ! :)

[SteveL1]

Hi, I wonder if you've had a chance to look at this at all just yet?

Thanks
Steve

[eerkunt]

Hi @SteveL1 ,

It has been quite hectic days for the last few weeks. Apologies for the delay. :( I am planning to have a look to all issues around the end of this week.

[SteveL1]

Hi,

I think those of us that are fortunate to still be working seem to be busier than before lockdown!!!

Appreciate your time looking at this :)

Thanks
Steve

[eerkunt]

Added this functionality within 894a36c. Will release today.

[eerkunt]

Closing the issue since we think it is fixed and there is no response so far.

Please do not hesitate to create a new one if the problem still occurs.