KVM + ebtables for anti guest IP spoofing

#!/usr/bin/env bash
apt update
apt install ebtables
ebtables -A FORWARD -i <vm_interface> -p IPv4 --ip-src '!' <vm_ip> -j DROP

# eg.
# ebtables -A FORWARD -i tap100i0 -p IPv4 --ip-src '!' 192.168.0.100 -j DROP

exit 0

 

โซเชียล

Leave a Reply