[ovirt-users] Associate IP addresses to MAC addresses (anti-spoofing rules)

[André Gustavo]

Aloha,

I'm using oVirt 4 in my hosting.

However, easily a customer can change the IP to another client (IP spoofing)

In vNIC profiles, altered Network Filter
from "VDSM-on-mac-spoofing" to "no-ip-spoofing"

It worked partially, but if the client power off 'vm' and turn on the 'vm',
he can perform the change in IP

I tried to use eptables, but also had problems
http://ebtables.netfilter.org/examples/basic.html#ex_anti-spoof


What is the best option?


-- 
---
André Gustavo Timermann
Curitiba/PR - Brasil
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20160912/c9bc6b82/attachment-0001.html>