Hi Kurian, On 04/09/2011 06:59 PM Kurian Thayil wrote: set your iptables ruleset as you would do it normally e.g. by using your own firewall-script or the config-tool of the respective distribution (yast, shorewall [...]). Usually, before replacing the current ruleset, the firewall script itself should delete existing all existing chains and also flush all tables. Finally you will have to restart your libvirt daemon to manipulate the existing ruleset to reflect it's configuration constraints. This approach is less tricky as writing a script catching all use cases needed in order to modify the existing ruleset, which is based on libvirt definitions. Nevertheless, it would still be nice to see such a feature which enables the user to manage custom rulesets with libvirt instead. Hope this helps.. ;) kind regards Jan