Re: enabling firewalling of bridged interfaces

[Jared <list-virt@xxxxxxxxxxx>]

On 07/22/2012 04:23 PM, Jared wrote:
> What do I need to do to enable iptables support for bridged interfaces?  I'm
> setting up a Gentoo/KVM VM host, and iptables will handle all traffic
> to/from the host system, but not any of the guests.  I seem to be missing
> some key kernel config option for this (specifically, whatever provides
> net.bridge.bridge-nf-call-iptables), but can't figure out what (more details
> below).  Is there a specific list of options I should enable, or perhaps a
> reference guide for this somewhere?

Well, nevermind.  Rebooting fixed the problem.  I was certain I had already
configured all of the necessary bridging settings before my last reboot, so
I didn't bother trying that before sending this e-mail.  After wasting
another hour and still having no luck, though, I figured what the hell...
and sure enough it worked.

So, I'm good now.  Sorry for the noise.  :-)

-- 
Jared
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html