github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #6397] Can we force ipvlan for network? #3261

New issue

Open

opened 2026-05-05 09:52:11 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 09:52:11 -06:00

Owner

Originally created by @Quackdoc on GitHub (Jul 2, 2024).
Original GitHub issue: https://github.com/netblue30/firejail/issues/6397

Currently it seems like firejail will always macvlan for ethernet and ipvlan for wifi. macvlan has an unfortunate side effect for network administrators of spamming "new devices" due to mac address. ipvlan due to sharing mac address with the main nic does not have this issue.

This can also potentially be an issue on networks that perform mac address whitelisting.

Describe the solution you'd like

be able to force firejail to ipvlan so as not to create issues for a network admin.

Describe alternatives you've considered

I'm not sure if there is a viable alternative with linux.

Originally created by @Quackdoc on GitHub (Jul 2, 2024). Original GitHub issue: https://github.com/netblue30/firejail/issues/6397 ### Is your feature request related to a problem? Please describe. Currently it seems like firejail will always macvlan for ethernet and ipvlan for wifi. macvlan has an unfortunate side effect for network administrators of spamming "new devices" due to mac address. ipvlan due to sharing mac address with the main nic does not have this issue. This can also potentially be an issue on networks that perform mac address whitelisting. ### Describe the solution you'd like be able to force firejail to ipvlan so as not to create issues for a network admin. ### Describe alternatives you've considered I'm not sure if there is a viable alternative with linux.

gitea-mirror added the

enhancement

networking

labels 2026-05-05 09:52:11 -06:00

gitea-mirror commented

2026-05-05 09:52:12 -06:00

Author

Owner

@drwankingstein commented on GitHub (Jul 15, 2024):

Strongly asking for this as well, recently got a new router which sends notifications when new devices join, which I thought would be great, until I checked and found out I had 124 new device notifications.

@drwankingstein commented on GitHub (Jul 15, 2024): Strongly asking for this as well, recently got a new router which sends notifications when new devices join, which I thought would be great, until I checked and found out I had 124 new device notifications.

gitea-mirror commented

2026-05-05 09:52:13 -06:00

Author

Owner

@osevan commented on GitHub (Jul 17, 2024):

https://ostechnix.com/configure-vlan-tagging-in-linux/

Vlan is seperated and layer2 and very cheap for kernel

We can start network apps like firefox or torrent clients in seperated vlanIDS

I hope someone of team devs can try this

@osevan commented on GitHub (Jul 17, 2024): https://ostechnix.com/configure-vlan-tagging-in-linux/ Vlan is seperated and layer2 and very cheap for kernel We can start network apps like firefox or torrent clients in seperated vlanIDS I hope someone of team devs can try this

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#3261

No description provided.

Rows
Columns