Skip to content

Latest commit

 

History

History
27 lines (22 loc) · 1 KB

Readme.md

File metadata and controls

27 lines (22 loc) · 1 KB
Raw

libvirt-fsinf

This is a Debian (native) package installing various improvements to libvirt.

Currently this only installs some nwfilters:

Filter Description
allow-incoming-ipv6 Allow incoming IPv6 traffic.
no-dhcpv6-server Filter DHCP6 traffic.
no-ipv6-spoofing Drop IPv6 traffic with any source address not configured by the IPV6 parameter.
no-ipv6-router-advertisement Filter IPv6 router advertisement traffic.
clean-traffic-fsinf Improved version of the stock clean-traffic filter using all of the above filters.

To use the clean-traffic-fsinf filter, add this to your interface config:

<interface type='bridge'>
    <!-- ... your other interface config -->
    <mac address='01:23:45:67:89:ab'/>
    <filterref filter='clean-traffic-fsinf'>
        <parameter name='IP' value='93.184.216.34'/>
        <parameter name='IPV6' value='2606:2800:220:1:248:1893:25c8:1946'/>
        <parameter name='MAC' value='01:23:45:67:89:ab'/>
    </filterref>
</interface>