[pve-devel] Firewalling Proxmox with Shorewall

[Dietmar Maurer]

> Couldn't the be done more simply using ebtables.  Sorry if the has already
> been discussed.
> http://serverfault.com/questions/388544/is-it-possible-to-enable-port-
> isolation-on-linux-bridges

Shorewalls provide much more functionality than ebtables. And we also need
a firewall for routed interfaces.

> This would provide port based isolation on each existing bridge.  This would
> provide true isolation not just ipv4.

shorewall also provide  that feature.

- Dietmar