mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2024-09-19 14:10:58 +00:00
8c309caff8
With fragments borrowed from David Steven's previous submission and some further modifications: A set of modifications to filters to handle multiple IP addresses (and MAC addresses) per interface. Also: - enable DHCP traffic from VM to any DHCP server - will require an update to a libvirt-tck data file Signed-off-by: David L Stevens <dlstevens@us.ibm.com> Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
8 lines
284 B
XML
8 lines
284 B
XML
<filter name='no-arp-mac-spoofing' chain='arp-mac' priority='-520'>
|
|
<rule action='return' direction='out' priority='350' >
|
|
<arp match='yes' arpsrcmacaddr='$MAC'/>
|
|
</rule>
|
|
<!-- drop everything else -->
|
|
<rule action='drop' direction='out' priority='1000' />
|
|
</filter>
|