2 Commits

Author	SHA1	Message	Date
Marek Marczykowski	95a52d388b	Optimize iptables rules in NetVM ... Move "state RELATED,ESTABLISHED" rule to the beginning.	2011-04-06 10:33:42 +02:00
Rafal Wojtczuk	64e8013dc2	Unify dom0 and netvm sysconfig/iptables ... Plus: - dedicated chain for DNAT to nameservers - prevent intervm networking. Can be conveniently overriden in necessary cases by inserting ACCEPT clauses (per VM, probably) at the top of FORWARD	2010-09-06 15:10:01 +02:00