[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-users] Network VIFs in xen-3.1 guest do not start up



Hi Amin,

you can use ebtables on dom0 to filter arp packets.  The guest will
still be able to change the IP, but you prevent them from sending arp
replies for anything but their allowed IP address.

John

-- 
http://www.brightbox.co.uk - UK Rails Xen Hosting

On Wed, 2007-09-26 at 18:23 +0200, amin wrote:
> No I don't mean linux Dom0...
> 
> i know that this is in /etc/network/interfaces
> 
> by the way I'm using Debian Etch 4.0
> 
> 
> My Problem was about the DomU / Guests for which i created a xen config 
> file.
> 
> As they start up they have a NIC but no IP/Netmask/gateway Information 
> with it AND
> i don't want to allow THEM to provide a IP.
> 
> 
> 
> !!!It should be defined in the xen config file (like 2.0.6)!!!
> to prohibit them to change the IP / to cause damage by doing that.




_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users


 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.