On Sat, 3 Jan 2015 21:32:54 -0300
"Cesar Peschiera" <br...@click.com.py> wrote:

> 
> Now in the switch i have igmp snooping disabled, but i want to avoid
> flooding the entire VLAN and the VMs
> 
Following rule on your pve nodes should prevent igmp packages flooding
your bridge:
iptables -t filter -A FORWARD -i vmbr0 -p igmp -j DROP

If something happens you can remove the rule this way:
iptables -t filter -D FORWARD -i vmbr0 -p igmp -j DROP

PS. Your SPF for click.com.py is configured wrong:
Received-SPF: softfail (click.com.py ... _spf.copaco.com.py: Sender is
not authorized by default to use 'br...@click.com.py' in 'mfrom'
identity, however domain is not currently prepared for false failures
(mechanism '~all' matched)) receiver=mail1.copaco.com.py;
identity=mailfrom; envelope-from="br...@click.com.py"; helo=gerencia;
client-ip=190.23.61.163 
Received-SPF: softfail (click.com.py ... _spf.copaco.com.py: Sender is
not authorized by default to use 'br...@click.com.py' in 'mfrom'
identity, however domain is not currently prepared for false failures
(mechanism '~all' matched)) receiver=mail1.copaco.com.py;
identity=mailfrom; envelope-from="br...@click.com.py"; helo=gerencia;
client-ip=190.23.61.163 
Received-SPF: softfail (click.com.py ... _spf.copaco.com.py: Sender is
not authorized by default to use 'br...@click.com.py' in 'mfrom'
identity, however domain is not currently prepared for false failures
(mechanism '~all' matched)) receiver=mail1.copaco.com.py;
identity=mailfrom; envelope-from="br...@click.com.py"; helo=gerencia;
client-ip=190.23.61.163
-- 
Hilsen/Regards
Michael Rasmussen

Get my public GnuPG keys:
michael <at> rasmussen <dot> cc
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xD3C9A00E
mir <at> datanom <dot> net
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE501F51C
mir <at> miras <dot> org
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE3E80917
--------------------------------------------------------------
/usr/games/fortune -es says:
Why does a hearse horse snicker, hauling a lawyer away?
                -- Carl Sandburg

Attachment: pgppe0ADDiaZ9.pgp
Description: OpenPGP digital signature

_______________________________________________
pve-devel mailing list
pve-devel@pve.proxmox.com
http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel

Reply via email to