Firewall KVM guest.

[omlet]

hi comunity,I want to know what exactly do the option "Enable DHCP" and "MAC filter" in Option tab of Firewall propriety of a KVM guest. thanks a lot

 

[NStorm]

I'm just guessing here, but seems logical if DHCP will allow incoming DHCP packets on the VM to act it as a DHCP server. This seems useful to protect from a "rogue" (unwanted) DHCP server breaking your network.
And the MAC Filter sounds to add rules to block any martian sources from VM, i.e. packets with source MAC not belonging to assigned MAC of the VM virtual interface.

 

[omlet]

I'm just guessing here, but seems logical if DHCP will allow incoming DHCP packets on the VM to act it as a DHCP server. This seems useful to protect from a "rogue" (unwanted) DHCP server breaking your network. And the MAC Filter sounds to add rules to block any martian sources from VM, i.e. packets with source MAC not belonging to assigned MAC of the VM virtual interface.

thanks for your reply, the rules look like -A PVEFW-Drop -j PVEFW-DropBroadcast for the DHCPbut isn't specified for a guestand for the mac matching:-A tap111i0-OUT -m mac ! --mac-source AE:11:AA:FFD:EE -j DROP