[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-users] Xen IPv6 antispoof


  • To: Peter Braun <xenware@xxxxxxxxx>
  • From: Florian Heigl <florian.heigl@xxxxxxxxx>
  • Date: Thu, 18 Feb 2010 15:03:25 +0100
  • Cc: Xen List <xen-users@xxxxxxxxxxxxxxxxxxx>
  • Delivery-date: Thu, 18 Feb 2010 06:04:47 -0800
  • Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=xi0J3V41dEeEwsy67T/RBFEyIywTxL0KCtoDKHKLazVGGTteMk9C9vjCCguj1KwV/I WsidEVJszUvUva2jhl0dZAYm8gwWrmH2bTZezNX/JHiKOumZ2+QY8tyNIn0Jyr3V84pK 7C9bFwuUlhYuVYMM1/n2tDf+IQI9bDT5BO3nE=
  • List-id: Xen user discussion <xen-users.lists.xensource.com>

as far as i know the antispoof /egress filtering is done using ebtables.
I've checked and yes it supports ipv6.

Without knowing it, I would suspect that the xen network scripts are
missing some work on the ipv6 support. It might just be a wrong
syntax, but i doubt.

You should take this discussion to xen-devel and submit a bug report
somehow, somewhere. We're in 2010 and ipv6 support is not "optional"
any more.


florian


2010/2/16 Peter Braun <xenware@xxxxxxxxx>:
> Hi,
>
> we are just testing IPv6 support - xen bridged mode.
>
> IPv4 is specified all the time in domU.cfg. Now we added IPv6.
>
> vif = [ 'vifname=Debian,ip=2001:110:0::1:2/64 99.99.99.99' ]
>
> User inside domU can change his IPv4 address but he will be not able
> to communicate with outside world.
>
> But same thing doesn't work for specified IPv6 address.
> Changing IPv6 address inside domU to 2001:110:1::1:3/64 simply works.
>
> Question is how to prevent?
>
>
> Br
>
>
> Peter
>
> _______________________________________________
> Xen-users mailing list
> Xen-users@xxxxxxxxxxxxxxxxxxx
> http://lists.xensource.com/xen-users
>



-- 
'Sie brauchen sich um Ihre Zukunft keine Gedanken zu machen'

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users


 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.