libvirt/examples/xml/nwfilter/no-ip-spoofing.xml

<filter name='no-ip-spoofing' chain='ipv4'>

    <!-- drop if srcipaddr is not the IP address of the guest -->
    <rule action='drop' direction='out'>
        <ip match='no' srcipaddr='$IP' />
    </rule>
</filter>
Add some examples filters This patch adds some example filters to libvirt. They are automatically installed into the proper directory for libvirt to pick them up. 2010-03-25 17:46:13 +00:00			`<filter name='no-ip-spoofing' chain='ipv4'>`

			`<!-- drop if srcipaddr is not the IP address of the guest -->`
			`<rule action='drop' direction='out'>`
			`<ip match='no' srcipaddr='$IP' />`
			`</rule>`
			`</filter>`