[libvirt] [PATCH] nwfilter: Do not require DHCP requests to be broadcast

Stefan Berger stefanb at linux.vnet.ibm.com
Wed Dec 21 15:19:13 UTC 2011


Remove the requirement that DHCP messages have to be broadcasted.

---
  src/nwfilter/nwfilter_ebiptables_driver.c |    3 +--
  1 file changed, 1 insertion(+), 2 deletions(-)

Index: libvirt-acl/src/nwfilter/nwfilter_ebiptables_driver.c
===================================================================
--- libvirt-acl.orig/src/nwfilter/nwfilter_ebiptables_driver.c
+++ libvirt-acl/src/nwfilter/nwfilter_ebiptables_driver.c
@@ -3245,9 +3245,8 @@ ebtablesApplyDHCPOnlyRules(const char *i

      virBufferAsprintf(&buf,
                        CMD_DEF("$EBT -t nat -A %s"
-                              " -s %s -d Broadcast "
+                              " -s %s"
                                " -p ipv4 --ip-protocol udp"
-                              " --ip-src 0.0.0.0 --ip-dst 255.255.255.255"
                                " --ip-sport 68 --ip-dport 67"
                                " -j ACCEPT") CMD_SEPARATOR
                        CMD_EXEC




More information about the libvir-list mailing list