nwfilter: Do not require DHCP requests to be broadcasted

Remove the requirement that DHCP messages have to be broadcasted.
DHCP requests are most often sent via broadcast but can be directed
towards a specific DHCP server. For example 'dhclient' takes '-s <server>'
as a command line parameter thus allowing DHCP requests to be sent to a
specific DHCP server.
This commit is contained in:
Stefan Berger 2011-12-21 10:54:47 -05:00 committed by Stefan Berger
parent 33eca17f6a
commit 1c8f0cbb83

View File

@ -3245,9 +3245,8 @@ ebtablesApplyDHCPOnlyRules(const char *ifname,
virBufferAsprintf(&buf,
CMD_DEF("$EBT -t nat -A %s"
" -s %s -d Broadcast "
" -s %s"
" -p ipv4 --ip-protocol udp"
" --ip-src 0.0.0.0 --ip-dst 255.255.255.255"
" --ip-sport 68 --ip-dport 67"
" -j ACCEPT") CMD_SEPARATOR
CMD_EXEC