Thanks again for opening this bug. After talking to upstream (specifically thanks to laine on #virt :), the firewall rules are a feature of the libvirt networks. To do what you want, you should create the bridge yourself (i.e. using /etc/network/interfaces), and then specify that the vm's attach to that. So you would have no libvirt networks at all. The VM xml to do that would look like:
<interface type='bridge'> <source bridge='br0'/> <mac address='00:16:3e:1a:b3:4a'/> </interface> ** Changed in: libvirt (Ubuntu) Status: Triaged => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/746497 Title: libvirt installs firewall rules on package upgrades -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs