libvirt: How to add firewall rule?

atelszewski · 02-09-2018, 04:43 AM

Hi,

Could you give me an example of how can I add firewall rule in libvirt?

That is, how to add rule like the following iptables one:

Code:

$IPT -A INPUT -i virbr0 -p tcp -m state --state NEW --dport ssh -j ACCEPT

Thanks in advance!

--
Best regards,
Andrzej Telszewski

pan64 · 02-11-2018, 05:06 AM

I simply does not understand that. What do you mean by

Quote:

add firewall rule in libvirt?

What do you want to achieve?

atelszewski · 02-11-2018, 12:46 PM

Hi,

I have a couple of services (NFS, Samba) that I want to be only available to virtual machines.
For the moment, I have iptables rules sitting in system global firewall script, that let the particular traffic pass through virbr* interfaces.

But because this rules directly relate to libvirt, in the sense that the services are meant for libvirt managed VMs,
I think it would be a cleaner solution to let libvirt manage those rules.
Something like it already does with DHCP and DNS.

--
Best regards,
Andrzej Telszewski