On 03/18/2010 09:18 AM, Stefan Berger wrote: > This patch adds support for L3/L4 filtering using iptables. This adds > support for 'tcp', 'udp', 'icmp', 'igmp', 'sctp' etc. filtering. > > As mentioned in the introduction, a .c file provided by this patch > is #include'd into a .c file. This will need work, but should be

> for review. > > Signed-off-by: Stefan Berger <stefanb(a)us.ibm.com&gt; [same caveats as earlier in this thread...] > + unsigned int priority, > + int isIptablesRule) > { > ebiptablesRuleInstPtr inst; > > @@ -225,6 +229,7 @@ ebiptablesAddRuleInst(virConnectPtr conn > inst->neededProtocolChain = neededChain; > inst->chainprefix = chainprefix; > inst->priority = priority; > + inst->isIptablesRule = isIptablesRule; This should be bool, not int.

-- Eric Blake eblake(a)redhat.com +1-801-349-2682 Libvirt virtualization library http://libvirt.org [attachment "signature.asc" deleted by Stefan Berger/Watson/IBM]