> container to container ?
> 
> venet0->venet0 ?
> 

Yes, we also want to filter container to container traffic.

> Damn, I don't have tested this case.

We should really have some regression tests, but I do not know a tool to 
simulate
iptables? We can write a simple simulator ourselves, but that is much work  :-/

_______________________________________________
pve-devel mailing list
pve-devel@pve.proxmox.com
http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel

Reply via email to