[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [Xen-users] Securing the host's networking ?
Hey folks I have installed Xen on a machine and everything works so amazingly well. I can run ttylinux and some of those premade distribution images. My networking setup is very simple and is as follows: Internet <---> eth0 <---> xen-br0 <----> Xen guests I do have two questions: First, I've noticed that on most bridging HOWTO's they state that eth0 should be set to 0.0.0.0, however I've noticed that on my machine it is configured with an IP (via the distribution init scripts) and that xen-br0 simply copies its IP. Is this normal ? Also, I've noticed that when I do run a xen guest, it creates a network port to do whatever it does. My concern is that I've noticed I can reach this port from the outside world and I assume that may be a security risk. So I was wondering are there iptable scripts to lock down a xen machine ? or a bridging setup ? I don't understand too much about this bridging networking, so I wouldn't really know how to go about creating an iptables script for the host. Thanks!! Dana _______________________________________________ Xen-users mailing list Xen-users@xxxxxxxxxxxxxxxxxxx http://lists.xensource.com/xen-users
|
Lists.xenproject.org is hosted with RackSpace, monitoring our |