[ovirt-users] Ip spoofing

[Dan Kenigsberg]

On Tue, Jun 24, 2014 at 05:52:51PM +0800, Punit Dambiwal wrote:
> Hi Den,
> 
> Thanks for the updates...but still the user can spoof the another ip
> address by manually edit the ifcfg-eth0:0 file....
> 
> Like if i assign the 10.0.0.5 ip address to one VM through cloud-int...once
> the VM bootup user can login to VM and create another virtual ethernet
> device and add another ip address 10.0.0.6 to this VM....
> 
> I want in anyhow the user can not spoof the ip address....either they can
> edit but the new ip address can not boot up(should not active)...
> 
> Thanks,
> Punit

Have you placed my script properly? Could you share your domxml as
visible to libvirt?

  virsh -r dumxml <name-of-your-vm>

And as alluded by Sven - could you try to use the spooded IP address?
Configuring is not blocked by the filter, only using it (try pinging
outside of the VM).

Regrads,
Dan.