[pve-devel] [PATCH 1/4] bypass firewall for non firewall bridges

[Alexandre DERUMIER]

>>This does not work, because it accepts traffic from venet0!

Ok, I'll check that.


----- Mail original ----- 

De: "Dietmar Maurer" <dietmar at proxmox.com> 
À: "Alexandre Derumier" <aderumier at odiso.com>, pve-devel at pve.proxmox.com 
Envoyé: Vendredi 9 Mai 2014 11:55:13 
Objet: RE: [pve-devel] [PATCH 1/4] bypass firewall for non firewall bridges 

> ruleset_create_chain($ruleset, "PVEFW-FORWARD"); 
> + #bypass firewall for non firewalled bridge 
> + ruleset_addrule($ruleset, "PVEFW-FORWARD", "! -i fwbr+ -j ACCEPT"); 
> + 

This does not work, because it accepts traffic from venet0!