Hide Forgot
when is a domain network interface defined by this xml: <interface type='bridge'> <mac address='00:16:3e:00:00:e0'/> <source bridge='br0'/> <ip address='192.168.20.31'/> <target dev='vps1836'/> <model type='virtio'/> <driver name='vhost' txmode='iothread' /> <filterref filter='clean-traffic'/> <link state='up'/> <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0'/> </interface> ebtables nnetwork filter uses detected IP address from first packet but not IP address specified in XML. This causes network connectivity problems in Windows 2008 on first boot after installation and it can be used by administrator of VPS to use another than configured IP address (change ip address in VPS, reboot and use the new "unauthorized" ip address). So when IP element exist, ebtables filter can be created immediately with this address with no try to detect used address.
You can already do this, but the syntax is different: <filterref filter='clean-traffic'> <parameter name="IP" value="192.168.20.31"/> </filterref> See also: http://libvirt.org/formatnwfilter.html