summaryrefslogtreecommitdiff
path: root/.b/etc/libvirt/nwfilter/no-ipv6-spoofing.xml
blob: c8f665eefbb83d9f266238c5b43c15f05756f3ef (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
<!--
WARNING: THIS IS AN AUTO-GENERATED FILE. CHANGES TO IT ARE LIKELY TO BE
OVERWRITTEN AND LOST. Changes to this xml configuration should be made using:
  virsh nwfilter-edit no-ipv6-spoofing
or other application using the libvirt API.
-->

<filter name='no-ipv6-spoofing' chain='ipv6-ip' priority='-610'>
  <uuid>d7793108-fc88-4f21-8d30-1a52bfd7caef</uuid>
  <rule action='return' direction='out' priority='100'>
    <ipv6 srcipaddr='fe80::' srcipmask='10' protocol='udp'/>
  </rule>
  <rule action='return' direction='out' priority='500'>
    <ipv6 srcipaddr='$IPV6'/>
  </rule>
  <rule action='drop' direction='out' priority='1000'/>
</filter>