Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #234948
| From | john doe <johndoe65534@mail.com> |
|---|---|
| Newsgroups | linux.debian.user |
| Subject | Re: Shorewall and libvirt |
| Date | 2021-05-06 21:30 +0200 |
| Message-ID | <CbRR7-8ot-1@gated-at.bofh.it> (permalink) |
| References | <CbCyJ-7zw-1@gated-at.bofh.it> <CbGVH-1J3-3@gated-at.bofh.it> <CbRxL-8if-1@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
On 5/6/2021 8:13 PM, Charles Curley wrote: > On Thu, 6 May 2021 09:49:29 +0200 > john doe <johndoe65534@mail.com> wrote: > >> First you need to disable libvirt from playing with iptables, I >> changed (virsh net-edit default) from: >> <forward mode='nat'/> >> >> to: >> >> <forward mode='open'/> > > Thank you, that seems to have worked. > >> >> Then you can use whatever firewalling solution you like (this is >> documented in Libvirt's doc). > > I missed it. Sorry. > It is hard to spot it, I was simply mentioning it to let you validate what I was saying and not to put you on the spot! >> >> >> Remember that Bullseye as nftables per default, you might want to >> switch back to iptables for Shorewall to work properly. > > Done, thank you. > :) > During this whole fiasco, I noticed a problem with virtmanager. The > Bullseye version lets the user edit the XML. This is nice, because it > then applies whatever changes the user makes. However, as soon as you > hit the apply button, the displayed XML reverts to the original. The > file is correct, as indicated by cat, but the display is wrong. > Similarly, if you edit externally, even with virsh net-edit, the GUI > does not pick up the changes. I believe this is a serious bug. > I'm only using the CLI. I would file a bugreport about this on the libvirt mailing list or on Github! :) -- John Doe
Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Shorewall and libvirt Charles Curley <charlescurley@charlescurley.com> - 2021-05-06 05:10 +0200
Re: Shorewall and libvirt john doe <johndoe65534@mail.com> - 2021-05-06 09:50 +0200
Re: Shorewall and libvirt Charles Curley <charlescurley@charlescurley.com> - 2021-05-06 21:10 +0200
Re: Shorewall and libvirt john doe <johndoe65534@mail.com> - 2021-05-06 21:30 +0200
Re: Shorewall and libvirt Charles Curley <charlescurley@charlescurley.com> - 2021-05-07 01:50 +0200
Re: Shorewall and libvirt Andrei POPESCU <andreimpopescu@gmail.com> - 2021-05-07 08:20 +0200
csiph-web