[pve-devel] pve-firewall : ebtables

[Alexandre DERUMIER]

>>I thought this is implemented by this commit? 
>>
>>https://git.proxmox.com/?p=pve-firewall.git;a=commit;h=a34cfdd0d1caabb9c59a515056fbe98f7ee7a185 
>>
>>is there a bug? 

I think this patch was more about
$vmfw_conf->options->{enable}

and not
$net->{firewall}




----- Mail original ----- 

De: "Dietmar Maurer" <dietmar at proxmox.com> 
À: "Alexandre DERUMIER" <aderumier at odiso.com> 
Cc: pve-devel at pve.proxmox.com, "Stefan Priebe - Profihost AG" <s.priebe at profihost.ag> 
Envoyé: Mardi 15 Juillet 2014 12:52:21 
Objet: RE: [pve-devel] pve-firewall : ebtables 



> -----Original Message----- 
> From: Alexandre DERUMIER [mailto:aderumier at odiso.com] 
> Sent: Dienstag, 15. Juli 2014 12:43 
> To: Dietmar Maurer 
> Cc: pve-devel at pve.proxmox.com; Stefan Priebe - Profihost AG 
> Subject: Re: [pve-devel] pve-firewall : ebtables 
> 
> >>macfilter works even if the vm has firewall=0 
> 
> Currently, it's not true, 
> 
> the tap chain (including mac filtering), is not generated if firewall=0 

I thought this is implemented by this commit? 

https://git.proxmox.com/?p=pve-firewall.git;a=commit;h=a34cfdd0d1caabb9c59a515056fbe98f7ee7a185 

is there a bug?