[Xen-users] Issues with Xen and iptables

[Rainer Sokoll <rainer@xxxxxxxxxx>]

Hi,

I have a remote office connected to the head quarter through openvpn.
Works fine, as long as I route every traffic through the vpn. Now I need
to set up a splitted tunnel - all traffic to the head quarter must go
through the vpn, regular traffic goes directly into the internet.
The router in the remote office is a Xen dom0.
Routing works. I set up a (testing) rule for doing NAT:

iptables -o eth2 -t nat -A POSTROUTING -j SNAT -d x.x.x.x/32 --to-source y.y.y.y

I can see the rule in the POSTROUTING chain.
But if I do a "tcpdump -i eth2 -n host x.x.x.x", I can see that the
packets are not natted. Also "iptables -L -v -n -t nat" shows all
counters as 0 (zero) - it looks like my rule does not match any packet.
So my question is: are there issues with netfilter and Xen (in my case,
still 3.1)?

Any hint is appreciated,
Rainer

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users