[pve-devel] pve-firewall : add ipfilter protection

[Stefan Priebe - Profihost AG]

Hi,

OK my test setup is up and running.

I'm not really familiar with the current firewall code in PVE.

Are the global rules really global or just copied to each VM while
they're created?

Is it later possible to give a user the possibility to do its own
firewall stuff but not being allowed to EDIT my ipset filters for the
network cards?

Stefan

Am 12.06.2014 10:41, schrieb Dietmar Maurer:
> 
> 
>> -----Original Message-----
>> From: Alexandre DERUMIER [mailto:aderumier at odiso.com]
>> Sent: Donnerstag, 12. Juni 2014 10:37
>> To: Dietmar Maurer
>> Cc: pve-devel at pve.proxmox.com; Stefan Priebe
>> Subject: Re: [pve-devel] pve-firewall : add ipfilter protection
>>
>> What is the netid for a openvz veth interface ?
>>
> 
> eth0, eth1, ...
> 
>> (maybe can we add an example ?)
> 
> please add (send a patch).
>