[libvirt] [PATCH] nwfilter: Update of filters to handle multiple IP addresses
Eric Blake
eblake at redhat.com
Thu Dec 1 22:32:09 UTC 2011
On 11/28/2011 09:15 AM, Stefan Berger wrote:
> With fragments borrowed from David Steven's previous submission and some
> further modifications:
>
> A set of modifications to existing filters to handle multiple IP addresses
> (and MAC addresses) per interface.
>
> Also:
> - enable DHCP traffic from VM to any DHCP server
> - will require an update to a libvirt-tck data file
>
> Signed-off-by: David L Stevens <dlstevens at us.ibm.com>
> Signed-off-by: Stefan Berger <stefanb at linux.vnet.ibm.com>
>
> ---
> examples/xml/nwfilter/Makefile.am | 2 +
> examples/xml/nwfilter/clean-traffic.xml | 12 +++++++-
> examples/xml/nwfilter/no-arp-ip-spoofing.xml | 9 ++++++
> examples/xml/nwfilter/no-arp-mac-spoofing.xml | 7 ++++
> examples/xml/nwfilter/no-arp-spoofing.xml | 38
> ++------------------------
Lines like this,
> @@ -1,4 +1,4 @@
> -<filter name='clean-traffic'>
> +<filter name='clean-traffic' chain='root'>
> <!-- An example of a traffic filter enforcing clean traffic
and corrupted indentation like this, are making 'git am' reject this
patch. Would you mind resubmitting it?
--
Eric Blake eblake at redhat.com +1-919-301-3266
Libvirt virtualization library http://libvirt.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 620 bytes
Desc: OpenPGP digital signature
URL: <http://listman.redhat.com/archives/libvir-list/attachments/20111201/bf6e04ff/attachment-0001.sig>
More information about the libvir-list
mailing list