MAC filtering

[tincboy]

Sometimes, I need to filter the MAC address to prevent IP stealing and also other minor cases,
I've found that the libvirt is supporting it right now, and wonder if Proxmox support it too?
http://libvirt.org/firewall.html

Any information on this subject?

 

[dietmar]

We already started working on firewall code - but it is not usable so far, sorry.

 

[tincboy]

Would you please let me know what features the firewall will have? IP filtering and or MAC filtering ? Layer 2 or Layer 3 ?

 

[dietmar]

IP filtering and or MAC filtering ? Layer 2 or Layer 3 ?

So far we have a shorewall based prototype, doing IP and mac filtering.

 

[Dragoon]

Any updates on this?

 

[mmenaz]

Looking at git repository:
https://git.proxmox.com/?p=pve-firewall.git;a=summary
seems that the development of that part is stopped since 4 months ago.

 

[Dragoon]

Looking at git repository:
https://git.proxmox.com/?p=pve-firewall.git;a=summary
seems that the development of that part is stopped since 4 months ago.

Stopped because they are completed or just because they didn't want to add more functions to their interface? I would think by adding more features that Proxmox would receive more users.

 

[mo_]

technically, if you must have firewalling right now, you can use iptables just fine for anything and everything (in fact, Im actually doing that on 2 dedicated externally hosted servers). Naturally it doesnt have any GUI but you can set up things fairly easily with iptables nontheless.

 

[Dragoon]

technically, if you must have firewalling right now, you can use iptables just fine for anything and everything (in fact, Im actually doing that on 2 dedicated externally hosted servers). Naturally it doesnt have any GUI but you can set up things fairly easily with iptables nontheless.

Yes that is what i am using now, Just wanted something integrated with a gui in proxmox so i don't have to jump back and forth from command line to gui