How can I properly add basic network filters (clean-traffic or, at least, ip-spoofing prevention) to XEN (xend) guests managed by libvirt?
Or, in particular, can I manually execute libvirt's nwfilters from a script (for given parameters)?
I am using libvirt's network to create the bridge (
virbr0), but, apparently, the xen's
vif-bridge script is used to initialize the virtualized system's networking, and libvirt drops
nwfilter definitions in domain's xml (probably because it is converted to xen's native config).