Re: [Xen-users] CentOS 5.2, xen-3.3, network/firewall setup

[Meng Kuan <mengkuan@xxxxxxxxx>]

On Oct 22, 2008, at 8:17 PM, Robin Bowes wrote:
> I have CentOS 5.2 Dom0, which was running xen-3.1.2 which I rebuilt  
> from Fedora RPMS. All DomUs worked fine (CentOS PV installs).
> I recently upgraded to xen-3.3 (from the gitco repo - nice job!) and  
> I've found that guest networking is working the same. Specifically,  
> the Dom0 firewall is blocking traffic to/from the DomUs.
> If I turn off iptables on the dom0, the guest networking works OK.
Try the following tip from http://wiki.libvirt.org/page/Networking


Alternatively, you can prevent bridged traffic getting pushed through  
the host's iptables rules. In /etc/sysctl.conf add
# cat >> /etc/sysctl.conf <<EOF
net.bridge.bridge-nf-call-ip6tables = 0
net.bridge.bridge-nf-call-iptables = 0
net.bridge.bridge-nf-call-arptables = 0
EOF
# sysctl -p /etc/sysctl.conf


_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users