libvirt/examples/xml/nwfilter/no-mac-spoofing.xml

<filter name='no-mac-spoofing' chain='mac' priority='-800'>
  <!-- return packets with VM's MAC address as source address -->
  <rule direction='out' action='return'>
    <mac srcmacaddr='$MAC'/>
  </rule>
  <!-- drop everything else -->
  <rule direction='out' action='drop'>
    <mac/>
  </rule>
</filter>
Update of filters to handle multiple IP addresses With fragments borrowed from David Steven's previous submission and some further modifications: A set of modifications to filters to handle multiple IP addresses (and MAC addresses) per interface. Also: - enable DHCP traffic from VM to any DHCP server - will require an update to a libvirt-tck data file Signed-off-by: David L Stevens <dlstevens@us.ibm.com> Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com> 2011-12-02 01:34:36 +00:00			`<filter name='no-mac-spoofing' chain='mac' priority='-800'>`
			`<!-- return packets with VM's MAC address as source address -->`
			`<rule direction='out' action='return'>`
			`<mac srcmacaddr='$MAC'/>`
			`</rule>`
			`<!-- drop everything else -->`
			`<rule direction='out' action='drop'>`
			`<mac/>`
Add some examples filters This patch adds some example filters to libvirt. They are automatically installed into the proper directory for libvirt to pick them up. 2010-03-25 17:46:13 +00:00			`</rule>`
			`</filter>`