[libvirt-users] libvirt filters
I used filters like clean-traffic. The filters are working, but I can not see the rules in iptables -L. How can I look through the rules?
Have you tried using the -t option to iptables? For example: iptables -t nat -L See man iptables for more details. -- Robin At Sat, 20 Nov 2010 13:42:36 +0300, Anton Gorlov wrote:
I used filters like clean-traffic. The filters are working, but I can not see the rules in iptables -L. How can I look through the rules?
_______________________________________________ libvirt-users mailing list libvirt-users@redhat.com https://www.redhat.com/mailman/listinfo/libvirt-users
20.11.2010 14:49, Robin Green пишет:
Have you tried using the -t option to iptables?
Yes, of course. I made a test filter === <filter name='test' chain='ipv4'> <!-- drop if destination IP address is in the 10.35.40.6 --> <rule action='drop' direction='out'> <ip dstipaddr='10.35.40.6' dstipmask='32' /> </rule> <!-- not doing anything with receiving side ... --> </filter> === the rule is working, but I can not see it in any of the tables
于 2010年11月21日 18:15, Anton Gorlov 写道:
20.11.2010 14:49, Robin Green пишет:
Have you tried using the -t option to iptables?
Yes, of course.
I made a test filter === <filter name='test' chain='ipv4'>
<!-- drop if destination IP address is in the 10.35.40.6 --> <rule action='drop' direction='out'> <ip dstipaddr='10.35.40.6' dstipmask='32' /> </rule>
<!-- not doing anything with receiving side ... --> </filter> ===
the rule is working, but I can not see it in any of the tables
#ebtables -t nat -L for more info, take reference here: http://libvirt.org/git/?p=libvirt-tck.git;a=tree;f=scripts/nwfilter/nwfilter... Regards - Osier
_______________________________________________ libvirt-users mailing list libvirt-users@redhat.com https://www.redhat.com/mailman/listinfo/libvirt-users
On Sat, Nov 20, 2010 at 01:42:36PM +0300, Anton Gorlov wrote:
I used filters like clean-traffic. The filters are working, but I can not see the rules in iptables -L. How can I look through the rules?
It uses ebtables for 95% of its functionality. See this doc for more info http://libvirt.org/firewall.html Daniel
participants (4)
-
Anton Gorlov -
Daniel P. Berrange -
Osier Yang -
Robin Green