[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [Xen-devel] [PATCH] Re: network-bridge scriptbreaks networkconnectivity

> Luciano Miguel Ferreira Rocha <strange@xxxxxxxxxxxxx> wrote:
> >
> >> The interaction with host firewall rules has always been a bit
icky, not
> >> least because the xen network scripts typically run after the
> >> firewall scripts (and rename the network device). I've never
> >> what happens to the firewall rules - do they stay with the old eth0
> >> peth0) or do they now apply to the new device name?
> >
> > IIRC, interface names in iptables rules are symbolic, so eth0 means
> > currently stands for eth0.
> Correct.  Only the interface name is compared.

Just to be doubly clear, do you mean that the name is compared at the
time the rule is submitted, or at the time it is evaluated?

I presume the former? In which case, it will end up referring to peth0
rather than eth0 because the rename happens after the rules are
submitted. If the latter, is there a per-packet strcmp or is there some
clever caching?


Xen-devel mailing list



Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.