[pve-devel] pve-firewall: dhcp snooping

[Stefan Priebe - Profihost AG]

Am 04.06.2014 14:19, schrieb Dietmar Maurer:
>> I'm just afraid about the current situation which has no security at all. So
>> everybody can configure any ip he wants and send packets with it.
> 
> The 'allowed_ips' ipset idea is very easy to implement ...
> 

OK so adding option IP to each netX. Just don't know how to implement
the firewall rule to only allow packets from this MAC and IP combination.

Stefan