I know this is the -devel mailing list, but I can find no other way of
contacting netcf developers or users.

Every time I use netcf, it makes a change to my iptables config, by
adding the following line:

-I FORWARD -m physdev --physdev-is-bridged -j ACCEPT

This is a pretty fundamental change to my iptables configuration - it
causes every packet destined for a bridged interface to pass through,
which breaks my existing firewall config. This causes traffic to make it
through to the bridges that I was formerly restricting. Every time I
comment it out, it gets added. Nothing I do seems to stop this tool from
breaking my iptables every time I use it. Browsing the source seems to
indicate that if bridged traffic is passed through iptables, netcf will
purposely alter my firewall config during the netcf init stage. Every
time.

How can this be corrected, so I can retain control of my firewall
configuration while using this tool to configure network bridges via
libvirt?

- Dan

_______________________________________________
netcf-devel mailing list
[email protected]
https://fedorahosted.org/mailman/listinfo/netcf-devel

Reply via email to