[libvirt] [RFC PATCHv2 4/9] make default chain policy "DROP"

David Stevens dlstevens at us.ibm.com
Wed Oct 5 16:04:11 UTC 2011


"Daniel P. Berrange" <berrange at redhat.com> wrote on 10/05/2011 08:43:45 
AM:
 
> This sounds like it is introducing a backwards compatibility problem
> wrt older libvirt deployments using NW Filters.

I don't think so. Again, only if someone has modified a standard
filter would they have to make those same modifications to the
new set. The default value wouldn't need to change, but they are
all ending with "-j DROP" otherwise.

                                                        +-DLS


 




More information about the libvir-list mailing list