Displaying 4 results from an estimated 4 matches for "nwfelemsrulesadvipaddrdetection".
2017 May 08
3
Re: nwfilter and address of network ip address
...IP address in the nwfilter so that I can use that
>> > filter for other networks. Is it possible to reference the host's IP
>> > address in the filter?
>
>There is a pre-defined parameter for the VM's own IP address:
>
> http://libvirt.org/formatnwfilter.html#nwfelemsRulesAdvIPAddrDetection
>
>but we don't have anything for the host's IP address. We could fairly
>easily add it though I reckon - eg provide a HOST_IP parameter.
Thanks Daniel.
>Regards,
>Daniel
2017 May 07
3
Re: nwfilter and address of network ip address
On Fri, May 5, 2017 at 4:29 PM, Nicolas Bock <nicolasbock@gmail.com> wrote:
> Hi,
>
> I am running a webserver on the libvirt host and would like to add a
> nwfilter such that a VM can access that server. The corresponding iptables
> rule would look like this:
>
> iptables --append INPUT --in-interface virbr0 --destination 192.168.122.1
> --protocol tcp --dport 80
2017 May 08
0
Re: nwfilter and address of network ip address
...gt; to hardcode the host IP address in the nwfilter so that I can use that
> > filter for other networks. Is it possible to reference the host's IP
> > address in the filter?
There is a pre-defined parameter for the VM's own IP address:
http://libvirt.org/formatnwfilter.html#nwfelemsRulesAdvIPAddrDetection
but we don't have anything for the host's IP address. We could fairly
easily add it though I reckon - eg provide a HOST_IP parameter.
Regards,
Daniel
--
|: https://berrange.com -o- https://www.flickr.com/photos/dberrange :|
|: https://libvirt.org -o- https://fs...
2017 May 08
0
Re: nwfilter and address of network ip address
...I can use that
> > > > filter for other networks. Is it possible to reference the host's IP
> > > > address in the filter?
> >
> > There is a pre-defined parameter for the VM's own IP address:
> >
> > http://libvirt.org/formatnwfilter.html#nwfelemsRulesAdvIPAddrDetection
> >
> > but we don't have anything for the host's IP address. We could fairly
> > easily add it though I reckon - eg provide a HOST_IP parameter.
>
> Thanks Daniel.
BTW, please don't misinterpret this to mean i'm going to actually implement
this myself. I...