I'll take a look at libpcap and update the thread. Thanks, Avi.
Dai
On Sun, Apr 17, 2011 at 5:36 AM, Avi Kivity wrote:
> On 04/14/2011 11:04 PM, Daisuke Nojiri wrote:
>
>> Hi, Avi,
>>
>> Complex and complete firewalling is probably out of my focus for now. I'
. [80-81]). ADDR can be a single address (e.g. 1.2.3.4) or a range
(e.g. 1.2.3.4/24). If ADDR is ommitted, all addresses match the rule.
TCP support will follow in another patch series.
Signed-off-by: Daisuke Nojiri
diff --git a/net/slirp.c b/net/slirp.c
index 51e4728..a22ca5c 100644
--- a/net
. [80-81]). ADDR can be a single address (e.g. 1.2.3.4) or a range
(e.g. 1.2.3.4/24). If ADDR is ommitted, all addresses match the rule.
TCP support will follow in another patch series.
Signed-off-by: Daisuke Nojiri
diff --git a/net.c b/net.c
index 0707188..35ec2ae 100644
--- a/net.c
+++ b/net.c
. [80-81]). ADDR can be a single address (e.g. 1.2.3.4) or a range
(e.g. 1.2.3.4/24). If ADDR is ommitted, all addresses match the rule.
If PROTO is omitted, all protocols match the rule.
TCP support will follow in another patch series.
Signed-off-by: Daisuke Nojiri
diff --git a/net.c b/net.c
]). ADDR can be a single address (e.g. 1.2.3.4) or a range
(e.g. 1.2.3.4/24). If ADDR is ommitted, all addresses match the rule.
If PROTO is omitted, all protocols match the rule.
TCP support will follow in another patch series.
Signed-off-by: Daisuke Nojiri
diff --git a/net.c b/net.c
index 2742741
]). ADDR can be a single address (e.g. 1.2.3.4) or a range
(e.g. 1.2.3.4/24). If ADDR is ommitted, all addresses match the rule.
If PROTO is omitted, all protocols match the rule.
TCP support will follow in another patch series.
Signed-off-by: Daisuke Nojiri
diff --git a/net.c b/net.c
index 8d6a555
Hi, Avi,
Complex and complete firewalling is probably out of my focus for now. I'm
trying to introduce a simple reverse firewall functionality which filters
outgoing patckets based on only destination address and port. Since Qemu
doesn't have any reverse firewall currently, I believe this is a goo
n the file specified
by FILE.
PORT can be a single number (e.g. 53) or a range (e.g. [80-81]). ADDR can be
a
single address (e.g. 1.2.3.4) or a range (e.g. 1.2.3.4/24). If ADDR
is ommitted,
all addresses match the rule. If PROTO is omitted, all protocols match the
rule.
TCP support will follow in ano
Thanks, Jan. I split my patch into three and started a new thread. I also
put all options in -net user. Yes, TCP firewall is coming. You'll see some
of the added functions will be shared.
Dai
On Tue, Apr 12, 2011 at 9:38 AM, Jan Kiszka wrote:
> On 2011-04-12 18:19, Daisuke Noji
ommitted, all addresses match the rule.
TCP support will follow (in another patch series).
Signed-off-by: Daisuke Nojiri
diff --git a/net.c b/net.c
index 38ca29a..a1048ad 100644
--- a/net.c
+++ b/net.c
@@ -933,6 +933,10 @@ static const struct {
.name = "dr
ommitted, all addresses match the rule.
TCP support will follow (in another patch series).
Signed-off-by: Daisuke Nojiri
diff --git a/net.c b/net.c
index 8d6a555..95256ce 100644
--- a/net.c
+++ b/net.c
@@ -925,6 +925,10 @@ static const struct {
.name = "gue
ommitted, all addresses match the rule.
TCP support will follow (in another patch series).
Signed-off-by: Daisuke Nojiri
diff --git a/net.c b/net.c
index 95256ce..38ca29a 100644
--- a/net.c
+++ b/net.c
@@ -929,6 +929,10 @@ static const struct {
.name = "dr
ommitted, all addresses match the rule.
TCP support will follow (in another patch series).
Signed-off-by: Daisuke Nojiri
diff --git a/net.c b/net.c
index 38ca29a..a1048ad 100644
--- a/net.c
+++ b/net.c
@@ -933,6 +933,10 @@ static const struct {
.name = "dr
ommitted, all addresses match the rule.
TCP support will follow (in another patch series).
Signed-off-by: Daisuke Nojiri
diff --git a/net.c b/net.c
index 38ca29a..a1048ad 100644
--- a/net.c
+++ b/net.c
@@ -933,6 +933,10 @@ static const struct {
.name = "dr
packets are logged in the file specified by FILE. PORT can be a single
number
(e.g. 53) or a range (e.g. [80-81]). If ADDR is ommitted, all addresses
match
the rule.
Signed-off-by: Daisuke Nojiri
--- a/qemu-options.hx
+++ b/qemu-options.hx
@@ -1119,6 +1119,24 @@ DEF("netdev"
15 matches
Mail list logo