[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-users] IP blocking


  • To: "Daniel P. Berrange" <berrange@xxxxxxxxxx>, xen-users@xxxxxxxxxxxxxxxxxxx
  • From: shacky <shacky83@xxxxxxxxx>
  • Date: Mon, 6 Aug 2007 15:25:31 +0200
  • Delivery-date: Mon, 06 Aug 2007 06:23:13 -0700
  • Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=mra9Ft7pJ0L7sRu4R5H7eyLYop1kyfhb497P2lt1xD9nuiUC/8s/sJId0TImcCnlSCmW0sZiTEQ6A4mjSA+6ovFDPb0EEc0dQ6i62iNoVLXjIlkcF8BFR3be3GX/feHVtualBSNuPCP0xGbHXyhAAc81pZWmAM9Y/NppEXvGwxU=
  • List-id: Xen user discussion <xen-users.lists.xensource.com>

> This ensures that all traffic to/from the guest passes through the iptables
> rules in Dom0. You can then filter traffic from individual vifN.M interfaces
> associated with the guest to make sure its only sending data with the valid
> predefined IP address and MAC address you gave it.

Ok, thank you!
To setup the iptables rules I have to know the name of the virtual
interface connected to the domU I created. The name of the virtual
interface is <ID:number> where ID is the ID of the domU and number is
the number of the network interface starting from 0.

I wish to create a script that install my domU from A to Z:
- create the LVM partitions
- uncompress my pre-created images in the partitions
- configure the main configuration files of the new domU
- configure iptables to lock the network usage

How I can make this script to know the name of the new virtual
interface to setup the iptables tules for the new domU?

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users


 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.