[ovirt-users] Ip spoofing

Dan Kenigsberg danken at redhat.com
Tue Jun 24 12:06:10 UTC 2014


On Tue, Jun 24, 2014 at 05:52:51PM +0800, Punit Dambiwal wrote:
> Hi Den,
> 
> Thanks for the updates...but still the user can spoof the another ip
> address by manually edit the ifcfg-eth0:0 file....
> 
> Like if i assign the 10.0.0.5 ip address to one VM through cloud-int...once
> the VM bootup user can login to VM and create another virtual ethernet
> device and add another ip address 10.0.0.6 to this VM....
> 
> I want in anyhow the user can not spoof the ip address....either they can
> edit but the new ip address can not boot up(should not active)...
> 
> Thanks,
> Punit

Have you placed my script properly? Could you share your domxml as
visible to libvirt?

  virsh -r dumxml <name-of-your-vm>

And as alluded by Sven - could you try to use the spooded IP address?
Configuring is not blocked by the filter, only using it (try pinging
outside of the VM).

Regrads,
Dan.



More information about the Users mailing list