On 13.03.2015 16:52, Maxim Nestratov wrote: > which is on by default when a new VM/CT is created. > We should do this because this feature can't be controlled > by libvirt now and it sets up some iptables rules. So it's > better to do this to avoid potential conflict of different > set of rules or to avoid unexpected behavior. > > Signed-off-by: Maxim Nestratov <mnestratov@xxxxxxxxxxxxx> > --- > src/parallels/parallels_sdk.c | 3 +++ > 1 files changed, 3 insertions(+), 0 deletions(-) > > diff --git a/src/parallels/parallels_sdk.c b/src/parallels/parallels_sdk.c > index 748a308..a0a2ba0 100644 > --- a/src/parallels/parallels_sdk.c > +++ b/src/parallels/parallels_sdk.c > @@ -3062,6 +3062,9 @@ prlsdkCreateVm(virConnectPtr conn, virDomainDefPtr def) > pret = PrlVmCfg_SetDefaultConfig(sdkdom, srvconf, PVS_GUEST_VER_LIN_REDHAT, 0); > prlsdkCheckRetGoto(pret, cleanup); > > + pret = PrlVmCfg_SetOfflineManagementEnabled(sdkdom, 0); > + prlsdkCheckRetGoto(pret, cleanup); > + > ret = prlsdkDoApplyConfig(conn, sdkdom, def); > if (ret) > goto cleanup; > ACK, libvirt has it's own subsystem for managing firewall. Michal -- libvir-list mailing list libvir-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/libvir-list