64e8013dc2
Plus: - dedicated chain for DNAT to nameservers - prevent intervm networking. Can be conveniently overriden in necessary cases by inserting ACCEPT clauses (per VM, probably) at the top of FORWARD |
||
---|---|---|
.. | ||
core-appvm.spec | ||
core-dom0.spec | ||
core-netvm.spec |