Re: filter network traffic of KVM guests.
On Thu, 17 May 2018 23:11:51 +0300
Reco wrote:
> Either ebtables (for a conventional brigde) or macvtap in private mode
> will do it. Openvswitch will work too, but it's nowhere near in
> simplicity compared to macvtap.
Thank you for your quick reply, Reco.
Unfortunately, I described improperly what I want to achieve.
I don't want to block all host - guest connections, but allow some with
iptables, e.g. SSH login from host to guest, but not the other way
round.
Do I have to use Open vSwitch then?
- Chris
--
Papst Franziskus ruft zum Kampf gegen Fake News auf. Wir finden, der
Mann, der sich als Stellvertreter Christi ausgibt, von dem er
behauptet, dessen Mutter sei zeitlebens Jungfrau gewesen, er hätte über
Wasser gehen und selbiges in Wein verwandeln können, hat vollkommen
recht.
Reply to: