Re: [Xen-users] Bridged networking example

[Alexandre Kouznetsov <alk@xxxxxxxxxx>]

Hello.

El 15/01/13 11:25, Sven escribió:
> > Firewalling on DomO or on the gateway?
> > ACL on the switch?
> > Wrong network mask?
> I figured it out: Since I followed the Gentoo guide, the kernel had a support
> compiled in for netfilter to see bridge traffic. Adding a few rules or removing
> support and my DomU is online.
Great!

xend is supposed to be able to add the needed ipfilter rules, to allow 
DomU's traffic, on a firewalled Dom0.
Refernece:
http://lists.xen.org/archives/html/xen-users/2012-11/msg00226.html
http://wiki.xen.org/wiki/Network_Configuration_Examples_%28Xen_4.1%2B%29

Honestly, Xen's iptables management never worked fine for me, I always 
used a external iptables script. Something like this:
iptables -A FORWARD -m physdev --physdev-in  vif+ -j ACCEPT
iptables -A FORWARD -m physdev --physdev-out vif+ -j ACCEPT


> (Only on Xen 4.2 though. On 4.1 the bridge script
> is broken and even adding it manually doesn't wire the DomU.)
Bridge-script is known to be broken since a while ago. The general 
recommendation is to build the bridge itself with OS's means, and make 
Xen to use as is.
Greetings.

--
Alexandre Kouznetsov


_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxx
http://lists.xen.org/xen-users