[pve-devel] [PATCH 2/2] bridge rules : -j ACCEPT for physical interfaces

Dietmar Maurer dietmar at proxmox.com
Tue Feb 25 16:25:00 CET 2014


> We need to accept traffic at the end of bridge rules for outgoing packets
> from tap->ethX, as we don't do ACCEPT in tap-out rules.

But we should only accept packages which originates from VMs? 




More information about the pve-devel mailing list