> >>Maybe no big problem unless the user assigns IP addresses to multiple > bridges. > > I'll do test today. Because I known openstack can use dhcpd from host The problem is that all routed traffic from HOST to VM is allowed. So a good test would be trying to block something.