WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

Re: [Xen-users] icmp problem on

To: "Fajar A. Nugraha" <fajar@xxxxxxxxx>
Subject: Re: [Xen-users] icmp problem on
From: "Oliver Rojo" <orojo@xxxxxxxxxxxx>
Date: Tue, 16 Feb 2010 11:44:24 +0000
Cc: xen-users@xxxxxxxxxxxxxxxxxxx
Delivery-date: Tue, 16 Feb 2010 03:50:56 -0800
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
In-reply-to: 7207d96f1002160259w49d23cecsa18233f7407cd0f8@xxxxxxxxxxxxxx
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
that did the trick! :D 

thanks a lot.

----- Original Message -----
From: Fajar A. Nugraha
[mailto:fajar@xxxxxxxxx]
To: Oliver Rojo [mailto:orojo@xxxxxxxxxxxx]
Cc:
xen-users@xxxxxxxxxxxxxxxxxxx
Sent: Tue, 16 Feb 2010 10:59:56 +0000
Subject:
Re: [Xen-users] icmp problem on


> On Tue, Feb 16, 2010 at 5:50 PM, Oliver Rojo <orojo@xxxxxxxxxxxx> wrote:
> > I can ping remote IP addresses but I couldn't ping domains such as
> google.com unless I do clear my shorewall rules on dom0. I'm using bridging
> by the way.
> 
> So you're able to ping google's IP address directly?
> If yes, sounds like shorewall is blocking DNS queries from domUs. You
> need to allow that, as by default iptables will not only filter dom0's
> traffic, but also bridged traffic from domUs.
> 
> An alternative would be to set
> /proc/sys/net/bridge/bridge-nf-call-iptables to 0, which should make
> iptables ignore bridged traffic.
> 
> -- 
> Fajar
> 

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

<Prev in Thread] Current Thread [Next in Thread>