[Xen-users] iptables, firewall into Dom0

[Sébastien CRAMATTE <s.cramatte@xxxxxxxxxx>]

Hello

I've setup Xen using vlan. I've different bridge per vlan
Each VM have it's own iptables  script 
I've got various type of VM  : http, ldap, mysql, nagios, ...

My question is how can I protect the Dom0 without block all the traffic
from DomU ...
I require restrictive rules with at least these :

INPUT:
ssh (tcp)
snmp (udp)
snmptrap (udp)
ping (icmp)

OUTPUT
http  (tcp)
ssh  (tcp)
dns  (udp)


Regards



_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users