etc_libvirt_hooks_network

#!/usr/bin/env bash

# /etc/libvirt/hooks/network
# https://www.libvirt.org/hooks.html
if [[ "$2" == "started" || "$2" == "plugged" || "$2" == "updated" ]] ; then
  /sbin/iptables -D FORWARD -o virbr0 -j REJECT --reject-with icmp-port-unreachable || true
  /sbin/iptables -D FORWARD -i virbr0 -j REJECT --reject-with icmp-port-unreachable || true
fi