Re: [Xen-devel] Bridging firewall?

[Matthieu PATOU <matxen@xxxxxxxxx>]

On Sun, 23 Jan 2005 23:15:29 -0000
"Ian Pratt" <m+Ian.Pratt@xxxxxxxxxxxx> wrote:

>  > In order to feel secure i've activated the antispoof options, 
> > but as it was
> > broken for me i tweak a little the rules ... if someone is 
> > intrested i can post
> > my script and give some explanations.
> 
> That would be useful.
> 
See the attached files, in order to work i put some rules :
vifx.0 must be bridged to xen-br0 (it correspond to the output of the firewall)
in order to be really accessible (some iptables rules are juste added line 79
and 80 for vifx.0 and not for other vif).

Attachment: network
Description: Binary data

Attachment: vif-bridge
Description: Binary data