[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: [libvirt] [PATCH 2/2] add MAC address based port filtering to qemu



On Wed, 2009-11-04 at 12:55 +0000, Daniel P. Berrange wrote:
...
> 
> Mark  pointed  out to me offlist, that this filtering is a little too
> restrictive because it also blocks multicast + broadcast packets. We
> can fix that easily enough with an extra patch though, and a single
> catch-all rule for multi/broad-cast packets.
> 
> Daniel
Hi,
I have revisited this subject and was trying to find a scenario, where
multi/broad-cast packets would be affected by this patch and failed so
far.
Since only the source mac address of a guest is filtered, I don't see
how a multicast or broadcast destination mac address could be a problem.

What am I missing?

-- 
Best regards, 

Gerhard Stenzel, 
-----------------------------------------------------------------------------------------------------------------------------------
IBM Deutschland Research & Development GmbH
Vorsitzender des Aufsichtsrats: Martin Jetter
Geschäftsführung: Dirk Wittkopp
Sitz der Gesellschaft: Böblingen
Registergericht: Amtsgericht Stuttgart, HRB 243294


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]