mirror of
https://github.com/libvirt/libvirt.git
synced 2025-02-25 18:55:26 -06:00
docs: fix incorrect info about routed networks
In a recent expansion of the documentation on network forward modes, I incorrectly stated that incoming sessions to guests on routed networks were blocked. This is true for guests on NATed networks, but not routed. This patch corrects that error, and adds a pointer to the nwfilter page for those who do want to restrict incoming sessions to hosts on routed networks.
This commit is contained in:
parent
755a09b579
commit
52e3b3d1bb
@ -134,12 +134,12 @@
|
|||||||
attribute is set, firewall rules will restrict forwarding
|
attribute is set, firewall rules will restrict forwarding
|
||||||
to the named device only. This presumes that the local LAN
|
to the named device only. This presumes that the local LAN
|
||||||
router has suitable routing table entries to return
|
router has suitable routing table entries to return
|
||||||
traffic to this host. Firewall rules are also installed
|
traffic to this host. All incoming and outgoing sessions
|
||||||
that prevent incoming sessions from the physical network
|
to guest on these networks are unrestricted. (To restrict
|
||||||
to the guests, but outgoing sessions are unrestricted (as
|
incoming traffic to a guest on a routed network, you can
|
||||||
are sessions from the host to the guests, and between
|
configure <a href="formatnwfilter.html">nwfilter rules</a>
|
||||||
guests on the same network.)<span class="since">Since
|
on the guest's interfaces.)
|
||||||
0.4.2</span>
|
<span class="since">Since 0.4.2</span>
|
||||||
</dd>
|
</dd>
|
||||||
|
|
||||||
<dt><code>bridge</code></dt>
|
<dt><code>bridge</code></dt>
|
||||||
|
Loading…
Reference in New Issue
Block a user