[libvirt] default networking issues

[David Lutterkort]

On Thu, 2008-07-31 at 09:55 +0100, Daniel P. Berrange wrote:
> The libvirt default networking capability  will automatically setup the
> correct iptables rules to allow outbound NAT based connectivity for guest
> VMs. If this wasn't working there are two likely causes:
> 
>  - You run 'service iptables stop' which blew away the rules libvirt
>    added

This is a terrible situation; it will be a big surprise to many
sysadmins and lead to lots of confusion - is this only temporary until
iptables/lokkit has facilities for cleaner addition of persistent
firewall rules ?

David