[pve-devel] pve-firewall : ebtables

[Stefan Priebe - Profihost AG]

Am 15.07.2014 10:48, schrieb Stefan Priebe - Profihost AG:
> 
> Am 15.07.2014 06:39, schrieb Alexandre Derumier:
>> Hi,
>> here the ebtables patches, details are in commits.
>>
>> Please comment, feel free to change and adapt them.


The code generates the following ipset stuff:

Name: PVEFW-0-venet0
Type: hash:net
Header: family inet hashsize 64 maxelem 64
Size in memory: 1424
References: 4
Members:

later it tries this
 input destroy PVEFW-0-venet0_swap
create PVEFW-0-venet0_swap list:set size 4
swap PVEFW-0-venet0_swap PVEFW-0-venet0
flush PVEFW-0-venet0_swap
destroy PVEFW-0-venet0_swap


But swap fails due to type missmatch. First one is hash:net and 2nd one
is list:set.



Stefan