2011/1/4 Daniel P. Berrange <berrange@xxxxxxxxxx>: > On Wed, Dec 22, 2010 at 10:09:54AM +0100, Paweł Krześniak wrote: >> I want to create isolated environment for guests - they will be >> connected to one bridge and will use private DNS data. No single >> packet from this isolated network can reach external network - this >> means no 53/udp traffic to resolvers defined in host's >> /etc/resolv.conf. > > This sounds like a useful feature for libvirt to directly > support, rather than requiring a hack in a external config > file. eg, Some XML element to indicate whether to enable > DNS proxying or not. yes, but it's only the first part of this useful feature. next parts are dnsmasq options like --addn-hosts --no-hosts --server --log-queries --local-ttl (and probably some more..) OK. I'll be happy with following *hack*: diff --git a/configure.ac b/configure.ac index acd30d9..7107661 100644 --- a/configure.ac +++ b/configure.ac @@ -134,7 +134,7 @@ dnl We will hard-code paths to these programs unless we cannot dnl detect them, in which case we'll search for the program dnl along the $PATH at runtime and fail if it's not there. AC_PATH_PROG([DNSMASQ], [dnsmasq], [dnsmasq], - [/sbin:/usr/sbin:/usr/local/sbin:$PATH]) + [/usr/local/sbin:/sbin:/usr/sbin:$PATH]) AC_PATH_PROG([RADVD], [radvd], [radvd], [/sbin:/usr/sbin:/usr/local/sbin:$PATH]) AC_PATH_PROG([BRCTL], [brctl], [brctl], -- Pawel -- libvir-list mailing list libvir-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/libvir-list