[ovirt-users] Associate IP addresses to MAC addresses (anti-spoofing rules)

André Gustavo andre at andregustavo.org
Mon Sep 12 18:33:40 UTC 2016


I'm using oVirt 4 in my hosting.

However, easily a customer can change the IP to another client (IP spoofing)

In vNIC profiles, altered Network Filter
from "VDSM-on-mac-spoofing" to "no-ip-spoofing"

It worked partially, but if the client power off 'vm' and turn on the 'vm',
he can perform the change in IP

I tried to use eptables, but also had problems

What is the best option?

André Gustavo Timermann
Curitiba/PR - Brasil
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20160912/c9bc6b82/attachment-0001.html>

More information about the Users mailing list