]> xenbits.xensource.com Git - libvirt.git/commit
nwfilter: enable rejection of packets
authorStefan Berger <stefanb@us.ibm.com>
Sat, 19 Feb 2011 01:13:40 +0000 (20:13 -0500)
committerStefan Berger <stefanb@us.ibm.com>
Sat, 19 Feb 2011 01:13:40 +0000 (20:13 -0500)
commit912d170f87b3d147bfde987249a727f7a7c7f1d7
treef0ecf2f6a8d2352bb079435649eaab7c1452c9a8
parentacab8a97cebf48c85f88951654cbac369344aceb
nwfilter: enable rejection of packets

This patch adds the possibility to not just drop packets, but to also have them rejected where iptables at least sends an ICMP msg back to the originator. On ebtables this again maps into dropping packets since rejecting is not supported.

I am adding 'since 0.8.9' to the docs assuming this will be the next version of libvirt.
docs/formatnwfilter.html.in
docs/schemas/nwfilter.rng
src/conf/nwfilter_conf.c
src/conf/nwfilter_conf.h
src/nwfilter/nwfilter_ebiptables_driver.c