Re: [libvirt] libvirt modifying iptables rules

2010-03-08 Thread Felix Schwarz
Am 07.03.2010 15:09, schrieb Varrun Ramani: I am right now undertaking a project which deals with verification of firewall rules. I wish to know which applications/libraries modify/query firewall rules. I came to know that libvirt modifies iptables rules. Can anyone let me know for what

Re: [libvirt] Don't add iptables rules when creating networks

2010-01-24 Thread Felix Schwarz
Am 21.12.2009 16:00, schrieb Daniel P. Berrange: My issues: 1) INPUT chain ACCEPTs DNS/dhcp from outside You might notice that the INPUT chain basically says that I ACCEPT all DNS/dhcp from all interfaces. I don't want that. As soon as I configure a packet filter (e.g. shorewall), libvirt's

Re: [libvirt] Don't add iptables rules when creating networks

2009-12-21 Thread Felix Schwarz
Am 21.12.2009 13:04, schrieb Daniel P. Berrange: There shold never be duplicated rules. If you stop a libvirt virutal network, it will remove its previously added rules, so there should be no duplication next time it is started. If removal isn't working, that's a bug to be fixed. I had two

[libvirt] Don't add iptables rules when creating networks

2009-12-20 Thread Felix Schwarz
Hi, I just found out that libvirt always add some iptables rules if it creates a natted (or routed) network. There were a couple of mailing list posts about this so I'm pretty sure this is not news to you. I don't want to go into the debate if your approach is sensible or not (I guess there

Re: [libvirt] Don't add iptables rules when creating networks

2009-12-20 Thread Felix Schwarz
After some more hours of trying to fix libvirt's behavior, I decided to fix this issue by patching libvirt. Patch for 0.6.3 attached. If there's hope getting something like that into the git repository, I can port it to 0.7 easily. fs diff -r 59b72393b8ce src/network_conf.c ---

[libvirt] Re: USB pass-through only works after many disconnects at the beginning

2009-05-06 Thread Felix Schwarz
Daniel P. Berrange schrieb: I think best bet is to try updating to a newer KVM build - you ought to be able to pull in the 'qemu-system-x86' RPM from Fedora 11 into a F10 host without too many deps. Unfortunately, this did not work as well and in addition running the VM was painfully slow

How to update kvm in Fedora manually? (was: Re: [libvirt] USB pass-through only works after many disconnects at the beginning)

2009-05-04 Thread Felix Schwarz
Guido Günther schrieb: On Sun, May 03, 2009 at 09:21:20PM +0200, Felix Schwarz wrote: So how can I use USB pass through? Could this be Windows-related? Judging from all the other threads (like [1]) it should be really easy to use. Yes, it usually is. I had problems with older KVM as well. Try

[libvirt] USB pass-through only works after many disconnects at the beginning

2009-05-03 Thread Felix Schwarz
Hi, I want to pass through a USB device to a KVM guest (Windows 2000). My host OS is a standard Fedora 10, 64 bit. However, the device is only passed to the guest when I use qemu monitor directly and only after several tries... The device has no Linux drivers ('AVM GmbH ISDN-Controller