[libvirt-users] network interface management in bridge firewall configuration

[Aleksander Trofimowicz]

Hello,

I'm just wondering why I can't manage my network interfaces  through
libvirt when the following kernel parameters are turned on:

net.bridge.bridge-nf-call-ip6tables
net.bridge.bridge-nf-call-iptables
net.bridge.bridge-nf-call-arptables

Is it a bug or by design? If the latter, could someone explain me
premises of such decision? I'm aware of security implications of
mixing conntrack and bridge bits, so we can skip that point.

This behaviour is noticeable when using:
libvirt-0.8.1-1.fc13.x86_64
netcf-libs-0.1.6-1.fc13.x86_64

-- 
thanks,
aleksander trofimowicz