[pve-devel] pve-firewall : add ipfilter protection

[Stefan Priebe - Profihost AG]

Am 11.06.2014 10:07, schrieb Dietmar Maurer:
>>>> Would it make sense to also allow ip/mask notation so pve knows more about
>> the network? May be display user ip settings?
>>
>> Don't have tested, but I think it should work. I'll test that today.
> 
> I just applied a simplified version of your patch.
> 
> I simply apply the filter if the VM firewall configuration defines a ipset named 'ipfilter'.
> 
> This works with venet and tap devices, and does not require any change in qemu-server config.
> 
> Does that work for you?

Can you please give me an example how to limit a user to a specific ip
with your commit?

Which lines do i have to insert into which files?

Thanks!

Greets,
Stefan