RE: [Xen-users] Xen 3.3 bridged-networking

["James Harper" <james.harper@xxxxxxxxxxxxxxxx>]

> Hi
> 
> I don't quite understand the new xen networking. We use
network-bridge!
> Everything works fine except that an iptables firewall on dom0 blocks
all
> my domU. In my firewall settings i use eth0. I figured out that eth0
is
> the bridge but where is the interface for dom0? I want my firewall
setting
> to only apply to dom0 interface!
> Since there is not anything like vif0.0 i don't know on which
interface to
> set up my firewall. Any suggestions how to solve this problem?
> 

Try:
echo 0 >/proc/sys/net/bridge/bridge-nf-call-iptables
echo 0 >/proc/sys/net/bridge/bridge-nf-call-ip6tables
echo 0 >/proc/sys/net/bridge/bridge-nf-call-arptables

That should make the firewall behave a bit more like what you are
expecting.

James

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users