[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-users] Iptables and antispoof?


  • To: <xen-users@xxxxxxxxxxxxxxxxxxx>
  • From: "Larry Ludwig" <larrylud@xxxxxxxxx>
  • Date: Mon, 26 Feb 2007 08:00:35 -0500
  • Cc: ulrich.windl@xxxxxxxxxxxxxxxxxxxx
  • Delivery-date: Mon, 26 Feb 2007 04:58:18 -0800
  • Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:from:to:cc:subject:date:message-id:mime-version:content-type:content-transfer-encoding:x-mailer:in-reply-to:x-mimeole:thread-index; b=EL9lrvh4CdbwLo7Fnk0cKvXpAaV7M2sPJU54uyB/9Wo+CCqa7lKl1Ps74DpevcwVyC5G31vGkLJwlhNvXpvqczSYzoR2c5c/mpqkn327OQQoxrwR9nXo/pZx1OuCcat63XY3oN22X9qnB0NikwNcJrXkDAUdzlg0svU5yc+S0bM=
  • List-id: Xen user discussion <xen-users.lists.xensource.com>
  • Thread-index: AcdZiojedQ/crvV+RMyV3wvhwqJAUgAGzW5A

> ------------------------------
> 
> Message: 4
> Date: Mon, 26 Feb 2007 09:44:25 +0100
> From: "Ulrich Windl" <ulrich.windl@xxxxxxxxxxxxxxxxxxxx>
>
> I'm afraid a user can do to a virtual box what he can do to a 
> real box. Normal 
> UNIX users cannot assign IP adresses. Root can do. Root is 
> responsible for the 
> machine. What should XEN do about that?
> 

Then what is the purpose of antispoof?  I thought antispoof is like a level
3 switch that a domU can only then use the Ips assigned to it?  Explain then
what antispoof should be used for?

-L
 
--
Larry Ludwig
Empowering Media
1-866-792-0489 x600
Have you visited our customer service blog?
http://www.supportem.com/blog/



_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users


 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.