Re: [libvirt-users] network filtering
于 2010年11月17日 15:42, Anton Gorlov 写道:
14.11.2010 23:19, Osier Yang пишет:
>> virsh start freebsd8.2
>> error: Failed to start domain freebsd8.2
>> error: internal error IP parameter must be given since libvirt was not
>> compiled with IP address learning support
>> what do I do wrong?
> Just as the error says, your libvirt is not compiled with "libpcap",
> filter "no-ip-spoofing" has a variable "$IP", which needs
"IP learning"
> of network filter driver to generate automatically.
> To work around it, recompile it with "--with-libpcap" or set
"$IP"
> by hand.
This filters working in kernel space or user?
it's based on iptables/ebtables, and also ip6tables in future.
so, it uses these tools in userspace, works with according
kernel module support, e.g. iptables_nat, ebtables, etc.
- Osier