Re: [libvirt] [PATCH 0/13] [RFC] Network filtering (ACL) extensions for libvirt

2010-03-18 Thread Stefan Berger
Daniel P. Berrange berra...@redhat.com wrote on 03/17/2010 11:00:26 AM: I hadn't thought about calling that function... I would want to call a function that can handle something like bash scripts, i.e., multiple concatenated fragments as those shown above just to be more

Re: [libvirt] [PATCH 0/13] [RFC] Network filtering (ACL) extensions for libvirt

2010-03-17 Thread Daniel P. Berrange
On Thu, Mar 11, 2010 at 08:06:04AM -0500, Stefan Berger wrote: Hi! The following set of patches add network filtering (ACL) extensions to libvirt and enable network traffic filtering for VMs using ebtables and, depending on the networking technology being used (tap, but not macvtap), also

Re: [libvirt] [PATCH 0/13] [RFC] Network filtering (ACL) extensions for libvirt

2010-03-17 Thread Stefan Berger
Daniel P. Berrange berra...@redhat.com wrote on 03/17/2010 10:40:36 AM: On Thu, Mar 11, 2010 at 08:06:04AM -0500, Stefan Berger wrote: Hi! The following set of patches add network filtering (ACL) extensions to libvirt and enable network traffic filtering for VMs using ebtables and,

Re: [libvirt] [PATCH 0/13] [RFC] Network filtering (ACL) extensions for libvirt

2010-03-17 Thread Daniel P. Berrange
On Wed, Mar 17, 2010 at 10:53:37AM -0400, Stefan Berger wrote: Daniel P. Berrange berra...@redhat.com wrote on 03/17/2010 10:40:36 AM: On Thu, Mar 11, 2010 at 08:06:04AM -0500, Stefan Berger wrote: Hi! The following set of patches add network filtering (ACL) extensions to

Re: [libvirt] [PATCH 0/13] [RFC] Network filtering (ACL) extensions for libvirt

2010-03-17 Thread Stefan Berger
Daniel P. Berrange berra...@redhat.com wrote on 03/17/2010 11:00:26 AM: Please respond to Daniel P. Berrange On Wed, Mar 17, 2010 at 10:53:37AM -0400, Stefan Berger wrote: Daniel P. Berrange berra...@redhat.com wrote on 03/17/2010 10:40:36 AM: I hadn't thought about calling

Re: [libvirt] [PATCH 0/13] [RFC] Network filtering (ACL) extensions for libvirt

2010-03-12 Thread Stefan Berger
One note: the attached patches must be compiled with --without-lxc support due to a linking problem. Will fix this for the next post. Regards, Stefan Hi! The following set of patches add network filtering (ACL) extensions to libvirt and enable network traffic filtering for VMs using

[libvirt] [PATCH 0/13] [RFC] Network filtering (ACL) extensions for libvirt

2010-03-11 Thread Stefan Berger
Hi! The following set of patches add network filtering (ACL) extensions to libvirt and enable network traffic filtering for VMs using ebtables and, depending on the networking technology being used (tap, but not macvtap), also iptables. Usage of either is optional and controlled through filters