mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2024-09-14 03:35:05 +00:00
af5594c88b
Fix a typing error in the no-ip-spoofing filter. Return DHCP request packets passing through this filter. Have the user use another filter to actually allow DHCP requests to be sent (action='accept').
15 lines
477 B
XML
15 lines
477 B
XML
<filter name='no-ip-spoofing' chain='ipv4-ip' priority='-710'>
|
|
<!-- allow UDP sent from 0.0.0.0 (DHCP); filter more exact later -->
|
|
<rule action='return' direction='out' priority='100'>
|
|
<ip srcipaddr='0.0.0.0' protocol='udp'/>
|
|
</rule>
|
|
|
|
<!-- allow all known IP addresses -->
|
|
<rule direction='out' action='return' priority='500'>
|
|
<ip srcipaddr='$IP'/>
|
|
</rule>
|
|
|
|
<!-- drop everything else -->
|
|
<rule direction='out' action='drop' priority='1000'/>
|
|
</filter>
|