[pve-devel] pve-firewall : add ipfilter protection

[Dietmar Maurer]

> > I think we loose a lot of features without it. I really liked
> > alexandre's idea as it binds IPs to MAC / network cards AND it allows
> > us to add a PVE dhcp server later as we already know which IP is on which
> interface.
> 
> I simply don't understand the problem. So please can you give a specific
> example, using exact IP network config, so that I can reproduce that scenario
> here?

OK, I finally understand the problem. I guess I will implement the suggestion from Alexandre:

[ipset ipfilter-net0]
...


I guess that will work for you?