[Pkg-libvirt-maintainers] Bug#636712: Bug#636712: Bug#636712: libvirt-bin: cannot create rule since iptables tool is missing with custom nwfilters

[Guido Günther]

Hi Luca,
On Tue, Aug 09, 2011 at 05:45:09PM +0200, Luca Capello wrote:
[..snip..] 
> The major problem IMHO is to identify both the network interface and the
> IP, given that with the default configuration all virtual interfaces
> belong to the same bridge.  In case we would also want the MAC address,
> `man interfaces` contains the following hint:
> 
> 	See the get-mac-address.sh script  in the examples directory
> 	for an  example of such  a mapping script.  See  also Debian
> 	bug #101728.
> 
> Once these information are available, the /e/n/i stanza should be the
> following (if I have correctly read `man interfaces`):
> 
>   allow-hotplug vnet0
>   iface vnet0 inet manual
>         post-up /path/to/your/script.sh up
>         pre-down /path/to/your/script.sh down
> 
> Leave me some more tests and I should come up with a polished and tested
> README.ifupdown ;-)
I'd be happy to add that but wouldn't it be nicer to use libvirt's
matching capabilities?
Cheers,
 -- Guido