[pve-devel] pve-firewall : ebtables

[Alexandre DERUMIER]

> I think this patch was more about 
> $vmfw_conf->options->{enable} 

>>yes (generate macfilter, even if firewall is disabled). 

I was confused by your previous mail

"
It works the opposite way:
macfilter works even if the vm has firewall=0
"

so, I think you wanted to said,
"macfilter works even if the vm firewall has option enabled=0"





>>as I say before, I do not want to change that behaviour, until we have a very good reason? 

I agree with you, no need to change that.

----- Mail original ----- 

De: "Dietmar Maurer" <dietmar at proxmox.com> 
À: "Alexandre DERUMIER" <aderumier at odiso.com> 
Cc: pve-devel at pve.proxmox.com, "Stefan Priebe - Profihost AG" <s.priebe at profihost.ag> 
Envoyé: Mardi 15 Juillet 2014 13:17:24 
Objet: RE: [pve-devel] pve-firewall : ebtables 

> I think this patch was more about 
> $vmfw_conf->options->{enable} 

yes (generate macfilter, even if firewall is disabled). 

> and not 
> $net->{firewall} 

as I say before, I do not want to change that behaviour, until we have a very good reason?