[Qemu-devel] netfilter

[Qemu-devel] netfilter

[John R. Hogerhuis]

I was fiddling with getting FTP to work across user-net, and it seems to
me that there are some NAT issues with FTP, and DNS.

These specific issues can be fixed in slirp tcp_subr.c and elsewhere for
udp based DNS, but I'm wondering if this is the right way to go about
it. Perhaps the netfilter code should be shoehorned into slirp.
Netfilter already has several application level gateways and complete
configurability.

I'm sure having a full firewall between qemu and the guest/host OSes has
other applications as a sandbox for security analysis, besides just
making user-net work properly.

-- John.

Re: [Qemu-devel] netfilter

[Henrik Nordstrom]

On Sat, 2 Jul 2005, John R. Hogerhuis wrote:

> These specific issues can be fixed in slirp tcp_subr.c and elsewhere for
> udp based DNS, but I'm wondering if this is the right way to go about
> it. Perhaps the netfilter code should be shoehorned into slirp.

You can't due to licensing issues. netfilter is licensed under the GPL.

Regards
Henrik

Re: [Qemu-devel] netfilter

[Henrik Nordstrom]

On Sat, 2 Jul 2005, Henrik Nordstrom wrote:

> You can't due to licensing issues. netfilter is licensed under the GPL.

I'll take that back.. qemu is already a big mix of different licenses 
including several GPL components and adding some GPL code to the slirp may 
be acceptable.

Regards
Henrik

Re: [Qemu-devel] netfilter

[John R. Hogerhuis]

On Sat, 2005-07-02 at 23:26 +0200, Henrik Nordstrom wrote:

> You can't due to licensing issues. netfilter is licensed under the GPL.

Well of course anyone one could do it.

Based on keeping "system emulation under the BSD license" it can't...
basically a non-reason on actual technical merit. So if this is still
Fabrice's wish, it could be done but would require maintaining user-net
separately from QEMU proper (btw, it seems the QEMU License page should
probably be updated to reflect this... as far as one can tell from that,
the GPL is the primary license for QEMU).

Assuming not going that direction... is there a BSD-style licensed
equivalent to netfilter?

-- John.

Re: [Qemu-devel] netfilter

[Paul Brook]

> Based on keeping "system emulation under the BSD license" it can't...
> basically a non-reason on actual technical merit. So if this is still
> Fabrice's wish, it could be done but would require maintaining user-net
> separately from QEMU proper (btw, it seems the QEMU License page should
> probably be updated to reflect this... as far as one can tell from that,
> the GPL is the primary license for QEMU).

Most of qemu is LGPL (or third party BSD/other), not GPL.
Only the linux-user bits are GPL.

Paul