it appears xs 6.0 allows iptables rules across the bridge without csp

Chiradeep Vittal · Chiradeep Vittal · commit 3a3d096a5ced · 2012-02-13T15:53:45.000-08:00
diff --git a/scripts/vm/hypervisor/xenserver/vmops b/scripts/vm/hypervisor/xenserver/vmops
@@ -395,8 +395,10 @@ def egress_chain_name(vm_name):
 def can_bridge_firewall(session, args):
     try:
         util.pread2(['ebtables', '-V'])
+        util.pread2(['ipset', '-V'])
     except:
         return 'false'
+
     host_uuid = args.get('host_uuid')
     try:
         util.pread2(['iptables', '-N', 'BRIDGE-FIREWALL'])
