[pve-devel] pvefw question

[Alexandre DERUMIER]

first test :

./pvefw compile
chain 'BRIDGEFW-IN' already exists


this is because

    # generate firewall rules for QEMU VMs 
    foreach my $vmid (keys %{$vmdata->{qemu}}) {
            ....
            generate_bridge_chains($ruleset, $bridge);
    }


I think you should initialize bridge chains separately, before generate tap chains.


----- Mail original ----- 

De: "Dietmar Maurer" <dietmar at proxmox.com> 
À: "Alexandre DERUMIER" <aderumier at odiso.com> 
Cc: pve-devel at pve.proxmox.com 
Envoyé: Lundi 17 Février 2014 13:24:59 
Objet: RE: pvefw question 

I just committed my changes. 

The API is simplified: 

# ./pvefw 
ERROR: no command specified 
USAGE: pvefw <COMMAND> [ARGS] [OPTIONS] 
pvefw help [<cmd>] [OPTIONS] 

pvefw compile [OPTIONS] 
pvefw start [OPTIONS] 
pvefw stop 


I have done no test so far, so I guess there are bugs. 

Do you think that will work, or do you miss some major functionality?