Re: [pve-devel] Firewall API user access

2014-06-10 Thread Dietmar Maurer
> it is correct that only root can do firewall stuff? yes > Is it planned to add custom access rights later? yes ___ pve-devel mailing list pve-devel@pve.proxmox.com http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel

[pve-devel] Firewall API user access

2014-06-10 Thread Stefan Priebe - Profihost AG
Hi, it is correct that only root can do firewall stuff? Is it planned to add custom access rights later? Stefan ___ pve-devel mailing list pve-devel@pve.proxmox.com http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel

Re: [pve-devel] pve-firewall : add ipfilter protection

2014-06-10 Thread Alexandre DERUMIER
>>Would it make sense to also allow ip/mask notation so pve knows more about >>the network? May be display user ip settings? Don't have tested, but I think it should work. I'll test that today. - Mail original - De: "Stefan Priebe - Profihost AG" À: "Alexandre Derumier" Cc: pve-dev

Re: [pve-devel] rhel7 released :)

2014-06-10 Thread Alexandre DERUMIER
Damn, I think they don't have yet published the sources. - Mail original - De: "Dietmar Maurer" À: "Alexandre DERUMIER" , "pve-devel" Envoyé: Mercredi 11 Juin 2014 08:11:16 Objet: RE: [pve-devel] rhel7 released :) > official sources are available in centos repository now. > >

Re: [pve-devel] rhel7 released :)

2014-06-10 Thread Dietmar Maurer
> official sources are available in centos repository now. > > https://git.centos.org/summary/?r=rpms/kernel.git I am unable to find the sources there. Please can you point me to the files? ___ pve-devel mailing list pve-devel@pve.proxmox.com http://p

Re: [pve-devel] pve-firewall : add ipfilter protection

2014-06-10 Thread Stefan Priebe - Profihost AG
Would it make sense to also allow ip/mask notation so pve knows more about the network? May be display user ip settings? Stefan Excuse my typo sent from my mobile phone. > Am 11.06.2014 um 04:03 schrieb Alexandre Derumier : > > currently only for qemu. > > for openvz: > > -veth not yet imple

[pve-devel] [PATCH] add ipfilter protection (ip anti-spoofing)

2014-06-10 Thread Alexandre Derumier
ipfilter:1|0 this drop packets if guest ip address is different than ipaddress defined in vm config) Signed-off-by: Alexandre Derumier --- src/PVE/Firewall.pm | 35 --- 1 file changed, 28 insertions(+), 7 deletions(-) diff --git a/src/PVE/Firewall.pm b/src/PV

[pve-devel] pve-firewall : add ipfilter protection

2014-06-10 Thread Alexandre Derumier
currently only for qemu. for openvz: -veth not yet implemented -do we need it for venet0 ? (is it possible to change ip in container ?) ___ pve-devel mailing list pve-devel@pve.proxmox.com http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel

[pve-devel] [PATCH] add ipaddress option to net interface

2014-06-10 Thread Alexandre Derumier
used by firewall for ipfilter. (could be used later for dhcp too) Signed-off-by: Alexandre Derumier --- PVE/QemuServer.pm |5 - 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/PVE/QemuServer.pm b/PVE/QemuServer.pm index e1b85c3..96a8a7b 100644 --- a/PVE/QemuServer.pm +++ b/P

[pve-devel] qemu-server : add ipaddress option to net interface

2014-06-10 Thread Alexandre Derumier
need for firewall ipfilter ___ pve-devel mailing list pve-devel@pve.proxmox.com http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel

[pve-devel] rhel7 released :)

2014-06-10 Thread Alexandre DERUMIER
rhel7 has been released :) time to upgrade kernel ! official sources are available in centos repository now. https://git.centos.org/summary/?r=rpms/kernel.git ___ pve-devel mailing list pve-devel@pve.proxmox.com http://pve.proxmox.com/cgi-bin/mailma