> but after it's using tap chain...that's why it's go to vmbr0-IN. (I think it's > doing nothing, but it's an overhead). > > > Maybe can we manage special tap chain for these tap out->host rule ? > We drop all by default, but maybe later we'll need to open something like > dhcp, if we manage an dhcp server on proxmox host.
I am quit unsure about that. It is really difficult to understand that setup. Maybe we can use the --state to simplify things? _______________________________________________ pve-devel mailing list [email protected] http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel
