Set antispoof default to yes, as this seems safer, and is the current behaviour

in VifCtl.

Signed-off-by: Ewan Mellor <ewan@xensource.com>

diff --git a/tools/examples/network-bridge b/tools/examples/network-bridge
index c6fb1c1f47ae7ea4e675ce63b81bbded8634382d..360a6513c6d10e1a72217ed6c056f2f55c25ed00 100644 (file)
--- a/tools/examples/network-bridge
+++ b/tools/examples/network-bridge
@@ -25,7 +25,7 @@
 #            higher value than its default of 1.
 # bridge     The bridge to use (default xenbr${vifnum}).
 # netdev     The interface to add to the bridge (default eth${vifnum}).
-# antispoof  Whether to use iptables to prevent spoofing (default no).
+# antispoof  Whether to use iptables to prevent spoofing (default yes).
 #
 # start:
 # Creates the bridge and enslaves netdev to it.
@@ -66,7 +66,7 @@ for arg ; do export "${arg}" ; done
 vifnum=${vifnum:-0}
 bridge=${bridge:-xenbr${vifnum}}
 netdev=${netdev:-eth${vifnum}}
-antispoof=${antispoof:-no}
+antispoof=${antispoof:-yes}
 
 pdev="p${netdev}"
 vdev="veth${vifnum}"