search for: msg01547

...creates those LIBVIRT-* chains and when the network is started then all the rules will be placed into those chains to not contaminate config set by sysadmin. There is patch to postpone creating the chains unitl network actually is starting: https://www.redhat.com/archives/libvir-list/2019-April/msg01547.html So your options here are: a) undefine all NATed networks (typically there's 'default' network) b) uninstall network module (but this will render all domains using <interface type='network'/> unable to start). As an extension to a) you can have a network with <f...

Hi, i want to disable the nwfilter functionality of libvirt. It's surely nice for some people, nevertheless i don't want libvirt to alter any netfilter rules, neither i want the according functionality even available. I know about nwfilter-undefine, but what i'm looking for is an option to globally disable this functionality at all. Some config flag or similar. How can i achieve