[libvirt] [RFC PATCHv2 4/9] make default chain policy "DROP"
David Stevens
dlstevens at us.ibm.com
Wed Oct 5 16:04:11 UTC 2011
"Daniel P. Berrange" <berrange at redhat.com> wrote on 10/05/2011 08:43:45
AM:
> This sounds like it is introducing a backwards compatibility problem
> wrt older libvirt deployments using NW Filters.
I don't think so. Again, only if someone has modified a standard
filter would they have to make those same modifications to the
new set. The default value wouldn't need to change, but they are
all ending with "-j DROP" otherwise.
+-DLS
More information about the libvir-list
mailing list