Re: [Xen-users] Firewalls

["Dick Davies" <rasputnik@xxxxxxxxx>]

On 15/04/06, Tom Eastep <teastep@xxxxxxxxxxxxx> wrote:

> The reason that you can't use your existing iptables rules in a Xen dom0 is
> that the networking configuration after xend starts is different from the
> environment before xend starts (there is a bridge added and traffic passing
> through that bridge is visible to netfilter; there are also additional
> interfaces added but those interfaces have no IP configuration so they don't
> present a compatibility problem).

Thanks, just found the

 http://wiki.xensource.com/xenwiki/XenNetworking

on the wiki. Makes a lot more sense than the mental model is was
working from :)

--
Rasputin :: Jack of All Trades - Master of Nuns
http://number9.hellooperator.net/

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users