{"action":"created","issue":{"url":"https://api.github.com/repos/aphyr/jepsen/issues/102","repository_url":"https://api.github.com/repos/aphyr/jepsen","labels_url":"https://api.github.com/repos/aphyr/jepsen/issues/102/labels{/name}","comments_url":"https://api.github.com/repos/aphyr/jepsen/issues/102/comments","events_url":"https://api.github.com/repos/aphyr/jepsen/issues/102/events","html_url":"https://github.com/aphyr/jepsen/issues/102","id":146288818,"number":102,"title":"Nemesis iptables rules issues","user":{"login":"bogdando","id":2795820,"avatar_url":"https://avatars.githubusercontent.com/u/2795820?v=3","gravatar_id":"","url":"https://api.github.com/users/bogdando","html_url":"https://github.com/bogdando","followers_url":"https://api.github.com/users/bogdando/followers","following_url":"https://api.github.com/users/bogdando/following{/other_user}","gists_url":"https://api.github.com/users/bogdando/gists{/gist_id}","starred_url":"https://api.github.com/users/bogdando/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bogdando/subscriptions","organizations_url":"https://api.github.com/users/bogdando/orgs","repos_url":"https://api.github.com/users/bogdando/repos","events_url":"https://api.github.com/users/bogdando/events{/privacy}","received_events_url":"https://api.github.com/users/bogdando/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2016-04-06T11:48:05Z","updated_at":"2016-04-11T04:25:50Z","closed_at":"2016-04-11T04:25:50Z","body":"First, on :start, it shall drop related, established as well as new connections. This would simulate traffic isolation better for systems with connections being tracked.\r\n\r\nSecond, it shall not cut off his ssh legs and allow traffic to the 22 port."},"comment":{"url":"https://api.github.com/repos/aphyr/jepsen/issues/comments/208159317","html_url":"https://github.com/aphyr/jepsen/issues/102#issuecomment-208159317","issue_url":"https://api.github.com/repos/aphyr/jepsen/issues/102","id":208159317,"user":{"login":"aphyr","id":3748,"avatar_url":"https://avatars.githubusercontent.com/u/3748?v=3","gravatar_id":"","url":"https://api.github.com/users/aphyr","html_url":"https://github.com/aphyr","followers_url":"https://api.github.com/users/aphyr/followers","following_url":"https://api.github.com/users/aphyr/following{/other_user}","gists_url":"https://api.github.com/users/aphyr/gists{/gist_id}","starred_url":"https://api.github.com/users/aphyr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aphyr/subscriptions","organizations_url":"https://api.github.com/users/aphyr/orgs","repos_url":"https://api.github.com/users/aphyr/repos","events_url":"https://api.github.com/users/aphyr/events{/privacy}","received_events_url":"https://api.github.com/users/aphyr/received_events","type":"User","site_admin":false},"created_at":"2016-04-11T04:25:50Z","updated_at":"2016-04-11T04:25:50Z","body":"Jepsen's partitions are only between DB nodes. It should never snub the control node, so I don't see a need for a port 22 exception. (Also there are cases where I *want* to isolate port 22 between nodes)"}}