* [pve-devel] arp-filter doesn't work with alias
@ 2023-12-05 11:00 Harald Leithner
0 siblings, 0 replies; only message in thread
From: Harald Leithner @ 2023-12-05 11:00 UTC (permalink / raw)
To: pve-devel
Hi,
using an alias in ipfilter-net0 doesn't create an tapxxx-OUT-ARP entry
in ebtables. It works if the ipfilter-net0 ipset is an IP-address.
Other topic, is there a reason why no incoming arp request filter is set
automatically? I asked this back in 2018 and found it a couple of times
on the forum. Having many unused ips creates a flood on all VMs which is
a waste on resources and a kind of information leak.
thanks
Harald
--
ITronic
Harald Leithner
Lichtäckerstraße 22, A-2522 Oberwaltersdorf
Tel: +43-1-545 0 604, Mobil: +43-699-123 78 4 78
Mail: leithner@itronic.at | itronic.at
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2023-12-05 11:11 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2023-12-05 11:00 [pve-devel] arp-filter doesn't work with alias Harald Leithner
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox