[pve-devel] pve-firewall : add ipfilter protection

[Dietmar Maurer]

> >>Would it make sense to also allow ip/mask notation so pve knows more about
> the network? May be display user ip settings?
> 
> Don't have tested, but I think it should work. I'll test that today.

I just applied a simplified version of your patch.

I simply apply the filter if the VM firewall configuration defines a ipset named 'ipfilter'.

This works with venet and tap devices, and does not require any change in qemu-server config.

Does that work for you?