* [pve-devel] arp-filter doesn't work with alias
@ 2023-12-05 11:00 Harald Leithner
0 siblings, 0 replies; only message in thread
From: Harald Leithner @ 2023-12-05 11:00 UTC (permalink / raw)
To: pve-devel
Hi,
using an alias in ipfilter-net0 doesn't create an tapxxx-OUT-ARP entry
in ebtables. It works if the ipfilter-net0 ipset is an IP-address.
Other topic, is there a reason why no incoming arp request filter is set
automatically? I asked this back in 2018 and found it a couple of times
on the forum. Having many unused ips creates a flood on all VMs which is
a waste on resources and a kind of information leak.
thanks
Harald
--
ITronic
Harald Leithner
Lichtäckerstraße 22, A-2522 Oberwaltersdorf
Tel: +43-1-545 0 604, Mobil: +43-699-123 78 4 78
Mail: leithner@itronic.at | itronic.at
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2023-12-05 11:11 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2023-12-05 11:00 [pve-devel] arp-filter doesn't work with alias Harald Leithner
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.