From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([140.186.70.92]:60906) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1QCCLX-0001Vk-7e for qemu-devel@nongnu.org; Tue, 19 Apr 2011 10:56:12 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1QCCLV-0004Fw-Rk for qemu-devel@nongnu.org; Tue, 19 Apr 2011 10:56:07 -0400 Received: from smtp-out.google.com ([74.125.121.67]:25852) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1QCCLS-0004Fd-H6 for qemu-devel@nongnu.org; Tue, 19 Apr 2011 10:56:05 -0400 Received: from kpbe16.cbf.corp.google.com (kpbe16.cbf.corp.google.com [172.25.105.80]) by smtp-out.google.com with ESMTP id p3JEu00e021576 for ; Tue, 19 Apr 2011 07:56:00 -0700 Received: from pvg3 (pvg3.prod.google.com [10.241.210.131]) by kpbe16.cbf.corp.google.com with ESMTP id p3JEsOdK014246 (version=TLSv1/SSLv3 cipher=RC4-SHA bits=128 verify=NOT) for ; Tue, 19 Apr 2011 07:55:56 -0700 Received: by pvg3 with SMTP id 3so3529168pvg.4 for ; Tue, 19 Apr 2011 07:55:56 -0700 (PDT) MIME-Version: 1.0 In-Reply-To: <4DAADEBA.5070700@redhat.com> References: <4DA47FEB.5070402@siemens.com> <4DA6FB44.3020208@redhat.com> <4DA6FFE9.6010100@redhat.com> <4DAADEBA.5070700@redhat.com> Date: Tue, 19 Apr 2011 07:55:56 -0700 Message-ID: From: Daisuke Nojiri Content-Type: multipart/alternative; boundary=001636e0ae0f96a22f04a146b40c Subject: Re: [Qemu-devel] [PATCH] Slirp reverse UDP firewall List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Avi Kivity Cc: Jan Kiszka , qemu-devel@nongnu.org --001636e0ae0f96a22f04a146b40c Content-Type: text/plain; charset=ISO-8859-1 I'll take a look at libpcap and update the thread. Thanks, Avi. Dai On Sun, Apr 17, 2011 at 5:36 AM, Avi Kivity wrote: > On 04/14/2011 11:04 PM, Daisuke Nojiri wrote: > >> Hi, Avi, >> >> Complex and complete firewalling is probably out of my focus for now. I'm >> trying to introduce a simple reverse firewall functionality which filters >> outgoing patckets based on only destination address and port. Since Qemu >> doesn't have any reverse firewall currently, I believe this is a good >> addition and start. >> >> > IMO this is the wrong direction. Integrating libpcap should be simple (a > call to pcap_offline_filter()) and immediately satisfy all current and > future firewalling needs. > > > -- > error compiling committee.c: too many arguments to function > > --001636e0ae0f96a22f04a146b40c Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable I'll take a look at libpcap and update the thread. Thanks, Avi.
Dai

On Sun, Apr 17, 2011 at 5= :36 AM, Avi Kivity <= avi@redhat.com> wrote:
On 04/14/2011 11:04 PM, D= aisuke Nojiri wrote:
Hi, Avi,

Complex and complete firewalling is probably out of my focus for now. I'= ;m trying to introduce a simple reverse firewall functionality which filter= s outgoing patckets based on only destination address and port. Since Qemu = doesn't have any reverse firewall currently, I believe this is a good a= ddition and start.


IMO this is the wrong direction. =A0Integrating libpcap should be simple (a= call to pcap_offline_filter()) and immediately satisfy all current and fut= ure firewalling needs.


--
error compiling committee.c: too many arguments to function


--001636e0ae0f96a22f04a146b40c--