Aloha,

I'm using oVirt 4 in my hosting.

However, easily a customer can change the IP to another client (IP spoofing)

In vNIC profiles, altered Network Filter
from "VDSM-on-mac-spoofing" to "no-ip-spoofing"

It worked partially, but if the client power off 'vm' and turn on the 'vm', he can perform the change in IP

I tried to use eptables, but also had problems
http://ebtables.netfilter.org/examples/basic.html#ex_anti-spoof


What is the best option?


--
---
André Gustavo Timermann
Curitiba/PR - Brasil