WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-devel

Re: [Xen-devel] xen0=2.6.7 network problem in xenU (SOLVED)

To: Rik van Riel <riel@xxxxxxxxxx>
Subject: Re: [Xen-devel] xen0=2.6.7 network problem in xenU (SOLVED)
From: Ian Pratt <Ian.Pratt@xxxxxxxxxxxx>
Date: Tue, 24 Aug 2004 18:49:27 +0100
Cc: James Harper <JamesH@xxxxxxxxxxxxxxxx>, Ian Pratt <Ian.Pratt@xxxxxxxxxxxx>, "xen-devel@xxxxxxxxxxxxxxxxxxxxx" <xen-devel@xxxxxxxxxxxxxxxxxxxxx>, Ian.Pratt@xxxxxxxxxxxx
Delivery-date: Tue, 24 Aug 2004 19:08:27 +0100
Envelope-to: steven.hand@xxxxxxxxxxxx
In-reply-to: Your message of "Mon, 23 Aug 2004 23:05:13 EDT." <Pine.LNX.4.44.0408232304340.30547-100000@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
List-archive: <http://sourceforge.net/mailarchive/forum.php?forum=xen-devel>
List-help: <mailto:xen-devel-request@lists.sourceforge.net?subject=help>
List-id: List for Xen developers <xen-devel.lists.sourceforge.net>
List-post: <mailto:xen-devel@lists.sourceforge.net>
List-subscribe: <https://lists.sourceforge.net/lists/listinfo/xen-devel>, <mailto:xen-devel-request@lists.sourceforge.net?subject=subscribe>
List-unsubscribe: <https://lists.sourceforge.net/lists/listinfo/xen-devel>, <mailto:xen-devel-request@lists.sourceforge.net?subject=unsubscribe>
Sender: xen-devel-admin@xxxxxxxxxxxxxxxxxxxxx
> On Tue, 24 Aug 2004, James Harper wrote:
> 
> > a tcpdump in dom0 doesn't show any packets coming out of the vif
> > interfaces. Not even the arp requests. The packet counts don't increment
> > when I sent packets, although they do otherwise increment occasionally
> > but I don't know why.
> 
> I'm not seeing dhcp requests come out, but if I give the
> interface an IP address by hand things seem to work fine.

Did you enable 'vif-antispoof' in your xend-config.sxp?

If enabled, this inserts some iptables rules that ensures that
only packets with a specified IP source address will be forwarded
from a given vif. It basically ensures that a domain can only use
the IP address it's been allocated and can't spoof others.

The iptables rules attempt to let DHCP requests through (where
the IP src address will be unset), but hasn't been well tested
and may be overzealous in its filtering (see the vif-bridge
script).

If you have "(vif-antispoof no)" (and have no other iptables
rules inserted) then I'm not sure why DHCP isn't working. I
believe this is a pretty common usage mode.

BTW: is this using the kernel IP_PNP DCHP, or user space?

Best,
Ian


-------------------------------------------------------
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/xen-devel