Re: [Xen-users] IPtables working on domU but not dom0

[David Koski <david@xxxxxxxxxxxxxxxx>]

Have a look at this:

http://www.shorewall.net/Xen.html

Even if you don't use shorewall it might be helpful.

Regards,
David Koski
david.nospham@xxxxxxxxxxxxxxxx

On Monday 20 February 2006 08:17 am, Xen wrote:
> Hi,
>   Can anyone shed light on this? Is there other firewall software I could try 
> that wouldn't conflict?
> 
> Lyle
> 
> ------------------------------------------------------------
> Lyle Hopkins          - CosmicPerl.com CGI Scripts -
> Internet software solutions for the professional webmaster
> Email: webmaster@xxxxxxxxxxxxxx
> Web site: http://www.cosmicperl.com
> Specializing in Affiliate Software solutions
> ------------------------------------------------------------
>   ----- Original Message ----- 
>   From: Xen 
>   To: xen-users@xxxxxxxxxxxxxxxxxxx 
>   Sent: Saturday, February 18, 2006 2:04 AM
>   Subject: Re: [Xen-users] IPtables working on domU but not dom0
> 
> 
>   By the way on Fedora Core 4, dual opteron, 4GB ram.
> 
> 
>   Lyle
> 
>   ------------------------------------------------------------
>   Lyle Hopkins          - CosmicPerl.com CGI Scripts -
>   Internet software solutions for the professional webmaster
>   Email: webmaster@xxxxxxxxxxxxxx
>   Web site: http://www.cosmicperl.com
>   Specializing in Affiliate Software solutions
>   ------------------------------------------------------------
>     ----- Original Message ----- 
>     From: Xen 
>     To: xen-users@xxxxxxxxxxxxxxxxxxx 
>     Sent: Saturday, February 18, 2006 12:13 AM
>     Subject: [Xen-users] IPtables working on domU but not dom0
> 
> 
>     Hi All,
>       for some reason iptables wont load on dom0 although they are loading 
> fine on all the guest domains. I built the xen 3 kernel on the machine. I 
> checked that iptables were included. I can't figure out why it wont load. I'm 
> not getting any useful errors:-
>     "Applying iptables firewall rules: iptables-restore: line 27 failed" - 
> line 22 is COMMIT. The iptables file is identical to the domU one that works.
> 
>     Any help would be much appreciated. I don't like the idea of dom0 being 
> wide open.
> 
> 
>     Lyle
> 
>     ------------------------------------------------------------
>     Lyle Hopkins          - CosmicPerl.com CGI Scripts -
>     Internet software solutions for the professional webmaster
>     Email: webmaster@xxxxxxxxxxxxxx
>     Web site: http://www.cosmicperl.com
>     Specializing in Affiliate Software solutions
>     ------------------------------------------------------------
> 
> 
> ----------------------------------------------------------------------------
> 
> 
>     _______________________________________________
>     Xen-users mailing list
>     Xen-users@xxxxxxxxxxxxxxxxxxx
>     http://lists.xensource.com/xen-users
> 
> 
> ------------------------------------------------------------------------------
> 
> 
>   _______________________________________________
>   Xen-users mailing list
>   Xen-users@xxxxxxxxxxxxxxxxxxx
>   http://lists.xensource.com/xen-users


_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users