OpenNebula

Attached Firewall driver to provide advanced control of rules. Primarily this includes:

- traffic to/from VM
- specifying src and dst addresses

It works the same as the existing Firewall.rb by adding parameters to the NIC section of a VM template.

NIC = [ ..., FW_IN = "TCP,,:22,ACCEPT", FW_OUT = "TCP,:80,,ACCEPT" ]

Which translates to:

1. allow any host to SSH to this VM
2. allow this VM to browse the internet

The syntax for FW_OUT/FW_IN:

PROTOCOL,SRC,DST,ACTION

Where:

- PROTOCOL is the protocol (TCP, UDP, etc)
- ACTION is ACCEPT or DROP
- SRC/DST is the source/destination including port in this format: [1.2.3.4]:[port,port:port], the brackets are optional but required when the IP or PORT specification will contains : or , (IPv6 and multiple ports).

SRC/DEST can be left empty, or the IP or PORT part of the SRC/DST can be empty, to default to ANY IP or PORT.