[pve-devel] firewall : add ip "alias" feature suggestion.

Alexandre DERUMIER aderumier at odiso.com
Wed Apr 9 05:23:05 CEST 2014


>>I guess we can add this feature if you want. 

Ok, I'll work on that next week (I'm currently running my first training for proxmox)

----- Mail original ----- 

De: "Dietmar Maurer" <dietmar at proxmox.com> 
À: "Alexandre DERUMIER" <aderumier at odiso.com> 
Cc: "pve-devel" <pve-devel at pve.proxmox.com> 
Envoyé: Lundi 7 Avril 2014 10:23:05 
Objet: RE: [pve-devel] firewall : add ip "alias" feature suggestion. 

> We could create 1 ipset by alias, but I don't known if it's not too big memory 
> overhead, as hashtable min size is 64. 
> But we can make ipset of ipset, it's a supported feature. 
> 

Oh, my thought was that the user can do that if he really want to have an alias for a single IP. 

> (For DNS, what do you have in mind? ) 

Oh, ignore that (was a bad idea). 

> >> AFAIR I saw that feature on a CISCO firewall some time ago? 
> Yes, indeed. (Currently it's the way I manage my cisco firewall ;) 

I guess we can add this feature if you want. 


More information about the pve-devel mailing list