Hi,

I'm trying to setup a small testlab, so far everything looked good, but after I created the external networks and tenant networks neutron started to spam the log.

Looks like it's screwing up the line

-A POSTROUTING_ZONES -o enp6s0f1 -i br-ex -g POST_public

to

-A POSTROUTING_ZONES -o enp6s0f1
br-ex -g POST_public

But that's just a guess.

Output:

2014-12-24 12:39:17.176 5579 INFO neutron.agent.securitygroups_rpc [req-d42df24f-f3cf-4f59-b51d-02e094d959ad None] Preparing filters for devices set([u'a43ab24c-af72-4f8c-a083-5ffe3e227b0b'])
2014-12-24 12:39:17.344 5579 ERROR neutron.agent.linux.utils [req-d42df24f-f3cf-4f59-b51d-02e094d959ad None] 
Command: ['sudo', 'neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-c']
Exit code: 2
Stdout: ''
Stderr: "Bad argument `br-ex'\nError occurred at line: 52\nTry `iptables-restore -h' or 'iptables-restore --help' for more information.\n"
2014-12-24 12:39:17.345 5579 ERROR neutron.agent.linux.iptables_manager [req-d42df24f-f3cf-4f59-b51d-02e094d959ad None] IPTablesManager.apply failed to apply the following set of iptables rules:
      1. # Generated by iptables-save v1.4.21 on Wed Dec 24 12:39:17 2014
      2. *nat
      3. :PREROUTING ACCEPT [485:96708]
      4. :INPUT ACCEPT [1:64]
      5. :OUTPUT ACCEPT [84:5132]
      6. :POSTROUTING ACCEPT [84:5132]
      7. :OUTPUT_direct - [0:0]
      8. :POSTROUTING_ZONES - [0:0]
      9. :POSTROUTING_ZONES_SOURCE - [0:0]
     10. :POSTROUTING_direct - [0:0]
     11. :POST_public - [0:0]
     12. :POST_public_allow - [0:0]
     13. :POST_public_deny - [0:0]
     14. :POST_public_log - [0:0]
     15. :PREROUTING_ZONES - [0:0]
     16. :PREROUTING_ZONES_SOURCE - [0:0]
     17. :PREROUTING_direct - [0:0]
     18. :PRE_public - [0:0]
     19. :PRE_public_allow - [0:0]
     20. :PRE_public_deny - [0:0]
     21. :PRE_public_log - [0:0]
     22. :nova-api-OUTPUT - [0:0]
     23. :nova-api-POSTROUTING - [0:0]
     24. :nova-api-PREROUTING - [0:0]
     25. :nova-api-float-snat - [0:0]
     26. :nova-api-snat - [0:0]
     27. :nova-postrouting-bottom - [0:0]
     28. :neutron-postrouting-bottom - [0:0]
     29. :neutron-openvswi-OUTPUT - [0:0]
     30. :neutron-openvswi-POSTROUTING - [0:0]
     31. :neutron-openvswi-PREROUTING - [0:0]
     32. :neutron-openvswi-float-snat - [0:0]
     33. :neutron-openvswi-snat - [0:0]
     34. [0:0] -A PREROUTING -j neutron-openvswi-PREROUTING
     35. [0:0] -A OUTPUT -j neutron-openvswi-OUTPUT
     36. [0:0] -A POSTROUTING -j neutron-openvswi-POSTROUTING
     37. [0:0] -A POSTROUTING -j neutron-postrouting-bottom
     38. [0:0] -A neutron-postrouting-bottom -j neutron-openvswi-snat
     39. [0:0] -A neutron-openvswi-snat -j neutron-openvswi-float-snat
     40. [603:114570] -A PREROUTING -j nova-api-PREROUTING
     41. [608:116210] -A PREROUTING -j PREROUTING_direct
     42. [608:116210] -A PREROUTING -j PREROUTING_ZONES_SOURCE
     43. [608:116210] -A PREROUTING -j PREROUTING_ZONES
     44. [168:10172] -A OUTPUT -j nova-api-OUTPUT
     45. [216:13390] -A OUTPUT -j OUTPUT_direct
     46. [168:10172] -A POSTROUTING -j nova-api-POSTROUTING
     47. [168:10172] -A POSTROUTING -j nova-postrouting-bottom
     48. [216:13390] -A POSTROUTING -j POSTROUTING_direct
     49. [216:13390] -A POSTROUTING -j POSTROUTING_ZONES_SOURCE
     50. [216:13390] -A POSTROUTING -j POSTROUTING_ZONES
     51. [0:0] -A POSTROUTING_ZONES -o enp6s0f1
     52. br-ex -g POST_public
     53. [11:909] -A POSTROUTING_ZONES -o enp6s0f0 -g POST_public
     54. [203:12204] -A POSTROUTING_ZONES -g POST_public
     55. [216:13390] -A POST_public -j POST_public_log
     56. [216:13390] -A POST_public -j POST_public_deny
     57. [216:13390] -A POST_public -j POST_public_allow
     58. [0:0] -A PREROUTING_ZONES -i enp6s0f1
     59. br-ex -g PRE_public
     60. [304:57973] -A PREROUTING_ZONES -i enp6s0f0 -g PRE_public
     61. [304:58237] -A PREROUTING_ZONES -g PRE_public
     62. [608:116210] -A PRE_public -j PRE_public_log
     63. [608:116210] -A PRE_public ...