On Tue, Jun 24, 2014 at 05:52:51PM +0800, Punit Dambiwal wrote:
Hi Den,
Thanks for the updates...but still the user can spoof the another ip
address by manually edit the ifcfg-eth0:0 file....
Like if i assign the 10.0.0.5 ip address to one VM through cloud-int...once
the VM bootup user can login to VM and create another virtual ethernet
device and add another ip address 10.0.0.6 to this VM....
I want in anyhow the user can not spoof the ip address....either they can
edit but the new ip address can not boot up(should not active)...
Thanks,
Punit
Have you placed my script properly? Could you share your domxml as
visible to libvirt?
virsh -r dumxml <name-of-your-vm>
And as alluded by Sven - could you try to use the spooded IP address?
Configuring is not blocked by the filter, only using it (try pinging
outside of the VM).
Regrads,
Dan.