WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

[Xen-users] debian squeeze + xen4 + antispoof ?

To: "xen-users@xxxxxxxxxxxxxxxxxxx" <xen-users@xxxxxxxxxxxxxxxxxxx>
Subject: [Xen-users] debian squeeze + xen4 + antispoof ?
From: Shin Bong-Ho <hopoo@xxxxxxxxxx>
Date: Wed, 26 Jan 2011 15:45:38 +0900
Delivery-date: Wed, 26 Jan 2011 02:30:15 -0800
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
User-agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ko; rv:1.9.2.13) Gecko/20101207 Thunderbird/3.1.7
Hello.

I want to know how to configure debian squeeze + xen4 + antispoof .

I am using this line in xend-config.sxp
]# vi /etc/xen/xend-config.sxp
(network-script 'network-bridge antispoof=yes')

Under XEN 4.0.1 it is not working

Next is the output of iptables -L after booting

Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED PHYSDEV match
--physdev-out vif4.0
ACCEPT all -- anywhere anywhere PHYSDEV match --physdev-in vif4.0
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED PHYSDEV match
--physdev-out vif3.0
ACCEPT all -- anywhere anywhere PHYSDEV match --physdev-in vif3.0
ACCEPT all -- anywhere anywhere PHYSDEV match --physdev-in peth0

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

how to add correct iptables RULE.

Thanks.

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

<Prev in Thread] Current Thread [Next in Thread>
  • [Xen-users] debian squeeze + xen4 + antispoof ?, Shin Bong-Ho <=