lxd container in other network not reachable

Jonathan Baecker <[email protected]> Thu, 4 May 2017 21:51:54 +0200
Newsgroups gmane.comp.security.firewalls.firehol.user
Message-ID <[email protected]>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