[pve-devel] [PATCH] add aliases feature

Dietmar Maurer dietmar at proxmox.com
Tue Apr 22 18:53:30 CEST 2014


> How do you want to manage rules ?
> 
> example:
> 
> cluster.fw
> -----------
> [ipset myipset] (generate ipset PVEFW-myipset) ...
> vmid.fw
> 
> [ipset myipset]  (generate ipset VMID-myipset)
> 
> [RULES]
> OUT ACCEPT net0 +myipset
> 
> (do we look in VMID-myipset first, then if not exist PVEFW-myipset) ?

no, I thought we only lookup ipsets in the corresponding file.


More information about the pve-devel mailing list