security-group for specific access about pcfdev

[sclevine]

Hi @myminseok,

You should be able to access 192.168.11.11 from an app container without any additional security groups. Only outbound connections (for instance, to the host: 192.168.11.1) require security groups.

I'm unsure if your iptables changes will play nicely with the existing iptables rules. If you need to access port 3306 on another machine in your network, I suggest you add a security group allowing access to that machine directly:

[{"protocol":"tcp","destination":"192.168.67.2","ports":"3306"}]

If you must forward connections to that machine, I suggest you handle that on your host system (either via SSH forwarding, or iptables rules).

[sclevine]

Closing. Feel free to re-open if you still have questions.