Re: [Xen-devel] Bridged Networking in Dom 0 and Virtual NIC inWindows XP Home 32-bit HVM Guest

["Mr. Teo En Ming (Zhang Enming)" <enming.teo@xxxxxxxxxxxxxxx>]

Dear All,

Instead of flushing the forward chain in the filter table after win xp 
home hvm dom U has started, I have commented out/deactivated the 
following rule in the default Fedora 11 firewall configuration:
-A FORWARD -j REJECT --reject-with icmp-host-prohibited

This rule is the cause of all trouble.

By deactivating this rule, I have totally eliminated the need to flush 
the forward chain in the filter table after win xp home hvm dom U has 
started.
Hence now my Win XP Home HVM Dom U could access the outside world 
without any problem.
--
Mr. Teo En Ming (Zhang Enming) Dip(Mechatronics Engineering) 
BEng(Hons)(Mechanical Engineering)
Technical Support Engineer
Information Technology Department
Asiasoft Online Pte Ltd
Tampines Central 1 #04-01 Tampines Plaza
Singapore 529541
Republic of Singapore
Mobile: +65-9648-9798
MSN: teoenming@xxxxxxxxxxx
Alma Maters: Singapore Polytechnic, National University of Singapore



On 08/24/2009 11:20 PM, Mr. Teo En Ming (Zhang Enming) wrote:
> Hi All,
>
> My conclusions earlier in the day were totally erroneous.
>
> The problem is with the FORWARD chain in the filter table.
>
> After Win XP Home 32-bit HVM Guest has started, I flushed the forward 
> chain in the filter table with the command
> # iptables -t filter -F FORWARD
>
> This allows my WinXP Home HVM guest to obtain IP address successfully 
> from the wireless router using DHCP.
> Success!!!
>
> This is still a temporary fix. I still have to write the correct rules 
> for the FORWARD chain in the filter table.
> The following rules which are recommended by the XenNetworking Wiki 
> did not work for me:
> iptables -A FORWARD -m physdev --physdev-in eth0 --physdev-out '!' 
> eth0  -j
> ACCEPT
> iptables -A FORWARD -m physdev --physdev-out eth0 --physdev-in '!' 
> eth0  -j
> ACCEPT
>
> Neither did the rules automatically added by xend after winxp hvm has 
> started worked for me.
> Anyone knows the correct iptables rules to add to the forward chain in 
> the filter table?



_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel