Re: [Xen-users] Iptables and Xen

[Tapas Mishra <mightydreams@xxxxxxxxx>]

On Fri, Jun 10, 2011 at 12:02 PM, Abhishek Bichhawat
<abhishek.bichhawat@xxxxxxxxx> wrote:
> Hi,
>
> I have been trying to filter out domU packets from dom0 using iptables.
> I tried the following:
>
> iptables -I FORWARD -m physdev --physdev-in peth0 --physdev-out vif1.0 -j
> domU
> iptables -A domU -j DROP
>
> I expect that this should drop all the packets meant for domU,
Assuming that you did not do a syntax error and did as you wanted to
iptables -A domU -j DROP seems odd to me
iptables -A --destination domU -j DROP is making a bit sense.
See if you meant this only.
Paste the output of iptables -L -v -n on pastebin etc...
-----------
Tapas

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users