Hello,
I'm defining an isolated network like this:
--8<---------------cut here---------------start------------->8---
<network>
<name>net-lab</name>
<uuid>a1c95060-7fa4-542b-f836-caf8f0e35db6</uuid>
<bridge name='net-lab' stp='on' delay='0' />
</network>
--8<---------------cut here---------------end--------------->8---
I can start it, and I have some iptables rules added:
--8<---------------cut here---------------start------------->8---
Chain INPUT (policy ACCEPT 3 packets, 1684 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT udp -- net-lab any anywhere anywhere udp dpt:domain
0 0 ACCEPT tcp -- net-lab any anywhere anywhere tcp dpt:domain
0 0 ACCEPT udp -- net-lab any anywhere anywhere udp dpt:bootps
0 0 ACCEPT tcp -- net-lab any anywhere anywhere tcp dpt:bootps
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- net-lab net-lab anywhere anywhere
0 0 REJECT all -- any net-lab anywhere anywhere reject-with icmp-port-unreachable
0 0 REJECT all -- net-lab any anywhere anywhere reject-with icmp-port-unreachable
Chain OUTPUT (policy ACCEPT 3 packets, 1192 bytes)
pkts bytes target prot opt in out source destination
--8<---------------cut here---------------end--------------->8---
This interfer with my netfilter configuration.
Is there a way to avoid iptables rules to be added, or better, to call a script
for network configuration?
Regards.