Clarifying isolated network rules in nftables

2025-03-27 Thread Alexey Kashavkin
Hi, I’m trying to understand how firewall filter works for isolated network in libvirt v11.1.0. When I start the network I can see following rules in nftables: table ip libvirt_network { chain forward { type filter hook forward priority filter; policy accept;

Re: Clarifying isolated network rules in nftables

2025-03-27 Thread Daniel P . Berrangé via Users
On Thu, Mar 27, 2025 at 11:39:38AM +0300, Alexey Kashavkin wrote: > Hi, > > I’m trying to understand how firewall filter works for isolated network in > libvirt v11.1.0. When I start the network I can see following rules in > nftables: > > table ip libvirt_network { > chain forward { >