Firewall settings unworkable

[Richard W.M. Jones]

Seems quite complex.  What's wrong with a directory:

  /etc/iptables.d/

where RPMs like libvirt just drop the required additional rules (in a
separate chain if you like) and restart the iptables service?  It's
low-tech but simple and it's all that libvirt needs.

Rich.

-- 
Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones
virt-p2v converts physical machines to virtual machines.  Boot with a
live CD or over the network (PXE) and turn machines into Xen guests.
http://et.redhat.com/~rjones/virt-p2v