On Feb 4, 2013, at 2:29 AM, Joe Warren-Meeks <joe.warren.meeks at gmail.com> wrote: > Hi guys, > > I need to have arp and mac spoofing work on my virts so that HA works as I need it. > > I've used virsh nwfilter-edit nova-base to edit and remove the bits I need, > however it looks like that change was undone when the server was dist-upgraded > > What is the proper way to make these changes permanent? You could redefine nova-base in the code here: nova/virt/libvirt/firewall.py You could also change the line: 123 if pipelib.is_vpn_image(instance['image_ref']): to: 123 if True: which will cause all instances to get nova-vpn instead of nova base which allows spoofing. Vish > > Kind regards > > -- joe. > > _______________________________________________ > Mailing list: https://launchpad.net/~openstack > Post to : openstack at lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp