WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

Re: [Xen-users] Xen IPv6 antispoof

To: Peter Braun <xenware@xxxxxxxxx>
Subject: Re: [Xen-users] Xen IPv6 antispoof
From: Florian Heigl <florian.heigl@xxxxxxxxx>
Date: Thu, 18 Feb 2010 15:03:25 +0100
Cc: Xen List <xen-users@xxxxxxxxxxxxxxxxxxx>
Delivery-date: Thu, 18 Feb 2010 06:04:47 -0800
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type; bh=2dH4rrazDakDSJ1OC4k4AEvQzVzxTKCbXnpLJYnaZL4=; b=VYNCrVhwBW2fUi59z4kPfcs0r8WjUR6dA+BHqv/69GnfM+v8FQDX/lXpyzNT223Qg5 3YUbC6glNlRctBbRR0j/qTxggJmG0ngTlcEbGV1iz1Dc9zk8F8mpaXVlHjdkFOc9B759 fTP6G0wFk3mKy9N/E5ejqydm7aW4zKICJoS/g=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=xi0J3V41dEeEwsy67T/RBFEyIywTxL0KCtoDKHKLazVGGTteMk9C9vjCCguj1KwV/I WsidEVJszUvUva2jhl0dZAYm8gwWrmH2bTZezNX/JHiKOumZ2+QY8tyNIn0Jyr3V84pK 7C9bFwuUlhYuVYMM1/n2tDf+IQI9bDT5BO3nE=
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
In-reply-to: <acbf498f1002151621v143afe7cl5717ddadb717cd20@xxxxxxxxxxxxxx>
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References: <acbf498f1002151621v143afe7cl5717ddadb717cd20@xxxxxxxxxxxxxx>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
as far as i know the antispoof /egress filtering is done using ebtables.
I've checked and yes it supports ipv6.

Without knowing it, I would suspect that the xen network scripts are
missing some work on the ipv6 support. It might just be a wrong
syntax, but i doubt.

You should take this discussion to xen-devel and submit a bug report
somehow, somewhere. We're in 2010 and ipv6 support is not "optional"
any more.


florian


2010/2/16 Peter Braun <xenware@xxxxxxxxx>:
> Hi,
>
> we are just testing IPv6 support - xen bridged mode.
>
> IPv4 is specified all the time in domU.cfg. Now we added IPv6.
>
> vif = [ 'vifname=Debian,ip=2001:110:0::1:2/64 99.99.99.99' ]
>
> User inside domU can change his IPv4 address but he will be not able
> to communicate with outside world.
>
> But same thing doesn't work for specified IPv6 address.
> Changing IPv6 address inside domU to 2001:110:1::1:3/64 simply works.
>
> Question is how to prevent?
>
>
> Br
>
>
> Peter
>
> _______________________________________________
> Xen-users mailing list
> Xen-users@xxxxxxxxxxxxxxxxxxx
> http://lists.xensource.com/xen-users
>



-- 
'Sie brauchen sich um Ihre Zukunft keine Gedanken zu machen'

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

<Prev in Thread] Current Thread [Next in Thread>