RE: [Xen-users] Dom 0 firewall

["Ian Tobin" <itobin@xxxxxxxxxxxxx>]

Yes im trying to restrict traffic to Dom 0.

Im not quite sure what policy to set, I did have one setup before when i used 
the source version of Xen but deb version is causing problems when I apply the 
firewall script.

Do you have a default  one you use?

Thanks

Ian


-----Original Message-----
From: Thaddeus Hogan [mailto:thaddeus@xxxxxxxxxx] 
Sent: 24 June 2009 02:20
To: Ian Tobin
Cc: xen-users@xxxxxxxxxxxxxxxxxxx
Subject: Re: [Xen-users] Dom 0 firewall

----- "Ian Tobin" <itobin@xxxxxxxxxxxxx> wrote:


> Ive built a new server using xen debian lenny packages. Im trying to
> firewall dom 0 which i can do ok but it then blocks access to the dom
> Us. Has anyone managed to do this successfully?

Are you trying to restrict access to the Dom0 using iptables?

According to this page (http://wiki.xensource.com/xenwiki/XenNetworking) at the 
Xen Wiki, packets crossing the bridge interface into a vif pass through the 
FORWARD chain of iptables.  If this chain has a default policy of DROP or 
REJECT, then packets passing through the bridge to the DomUs will be impeded.

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users