| |
|
 |
|
 |
|
|
|
| |
|
|
xen-users
Re: [Xen-users] Domain0 and firewalls
David Koski wrote:
> On Wednesday 22 February 2006 04:33 pm, Tom Eastep wrote:
>> On Wednesday 22 February 2006 13:49, David Koski wrote:
>>
>>> Thanks Tom. Since I have eth0 and eth1 I have put this in zones:
>>>
>>> fw firewall
>>> xen0 ipv4
>>> xen1 ipv4
>>>
>>> ..and this in interfaces:
>>>
>>> xen0 xenbr0 detect routeback
>>> xen1 xenbr1 detect routeback
>>>
>>> Perhaps xen0 would be better named loc and xen1 named dmz.
>> Shorewall attaches absolutely no meaning to zone names so you can call them
>> 'foo' and 'bar' if you like; whatever has meaning to you.
>>
>>> Is that it?
>> Looks fine.
>
> I must be missing something because shorewall blocks all access.
>
David,
Please submit a full problem report (see
http://www.shorewall.net/support.htm) to the Shorewall User's list.
-Tom
--
Tom Eastep \ Nothing is foolproof to a sufficiently talented fool
Shoreline, \ http://shorewall.net
Washington USA \ teastep@xxxxxxxxxxxxx
PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users
|
|
|
| |
|
Home