[pve-devel] pvefw question

[Alexandre DERUMIER]

just send a patch, we just need to test BRIDGEFW-IN and BRIDGEFW-OUT with ruleset_chain_exist

----- Mail original ----- 

De: "Alexandre DERUMIER" <aderumier at odiso.com> 
À: "Dietmar Maurer" <dietmar at proxmox.com> 
Cc: pve-devel at pve.proxmox.com 
Envoyé: Lundi 17 Février 2014 13:38:48 
Objet: Re: [pve-devel] pvefw question 

first test : 

./pvefw compile 
chain 'BRIDGEFW-IN' already exists 


this is because 

# generate firewall rules for QEMU VMs 
foreach my $vmid (keys %{$vmdata->{qemu}}) { 
.... 
generate_bridge_chains($ruleset, $bridge); 
} 


I think you should initialize bridge chains separately, before generate tap chains. 


----- Mail original ----- 

De: "Dietmar Maurer" <dietmar at proxmox.com> 
À: "Alexandre DERUMIER" <aderumier at odiso.com> 
Cc: pve-devel at pve.proxmox.com 
Envoyé: Lundi 17 Février 2014 13:24:59 
Objet: RE: pvefw question 

I just committed my changes. 

The API is simplified: 

# ./pvefw 
ERROR: no command specified 
USAGE: pvefw <COMMAND> [ARGS] [OPTIONS] 
pvefw help [<cmd>] [OPTIONS] 

pvefw compile [OPTIONS] 
pvefw start [OPTIONS] 
pvefw stop 


I have done no test so far, so I guess there are bugs. 

Do you think that will work, or do you miss some major functionality? 
_______________________________________________ 
pve-devel mailing list 
pve-devel at pve.proxmox.com 
http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel