Re: [Xen-users] Firewalls

[Christian Lyra <lyra@xxxxxxxxxxxxx>]

Hi Tom,

        My current setup looks like yours. But my DomU firewall get the real 
NICs by hiding them from Dom0 and passing it to the DomU via 
pcipassthrought. I think if you did something like that you would be 
able to plug your wireless network on Firewall DomU, without the need 
for the wireless gateway.

        My file server runs on a DomU too, and it has the control of the SATA 
HD, but this is another  history...

>  Configuring a secure firewall in dom0 that also controls traffic
> to/from the domUs is a rather complex task -- I find it easier to run
> my firewall in a domU (see http://www.shorewall.net/XenMyWay.html).
>
>  -Tom

-- 
Christian Lyra
POP-PR - RNP

http://lyra.soueu.com.br

  Thus spake the master programmer: 
  ``It is time for you to leave.'' 
                                                The Tao Of Programing

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users