Re: [Xen-users] issue with iptables antispoofing rules in xen4.8 generetab by vif-bridge and vif-common.sh

[Hans van Kranenburg <hans@xxxxxxxxxxx>]

On 03/26/2018 07:58 PM, Wiebe Cazemier wrote:
>> From: spi@xxxxxxxxx
>> To: xen-users@xxxxxxxxxxxxxxxxxxxx
>> Sent: Saturday, 24 March, 2018 16:03:03
>> Subject: [Xen-users] issue with iptables antispoofing rules in xen4.8 
>> generetab
>> by vif-bridge and vif-common.sh
>>
>> Hi all
>>
>> I filed this issue with the Debian user-list as well but as I think it is not
>> Debian related I file it here as well.
>>
>> I have issues with the on domU startup automatically generated
>> antispoofing rules by
>>
>> /etc/xen/scripts/vif-bridge and
>> /etc/xen/scripts/vif-common.sh
> 
> On a side-note, the recommended way of configuring the network is doing it 
> manually (i.e. defining the bridge in your OS configuration files). The 
> issues with the script are numerous. For one, you can't do (the equivalent 
> of) '/etc/init.d/networking restart', because then the Xen script is not run. 
> Or you iptables state will fail because network devices aren't there yet. Etc.
> 
> See: 
> https://wiki.xenproject.org/wiki/Xen_Networking#Setting_up_bridged_networking

Are you confusing the old 'network-bridge' with 'vif-bridge'?

vif-bridge only attaches the dom0 side of the vif to the bridge.

Hans


_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxxx
https://lists.xenproject.org/mailman/listinfo/xen-users