[Xen-users] Securing the host's networking ?

[Dana Lux <dana.lux@xxxxxxxxx>]

Hey folks

I have installed Xen on a machine and everything works so amazingly
well.  I can run ttylinux and some of those premade distribution
images.

My networking setup is very simple and is as follows:

Internet <---> eth0 <---> xen-br0 <----> Xen guests

I do have two questions:

First, I've noticed that on most bridging HOWTO's they state that eth0
should be set to 0.0.0.0, however I've noticed that on my machine it
is configured with an IP (via the distribution init scripts) and that
xen-br0 simply copies its IP.  Is this normal ?

Also, I've noticed that when I do run a xen guest, it creates a
network port to do whatever it does.  My concern is that I've noticed
I can reach this port from the outside world and I assume that may be
a security risk.  So I was wondering are there iptable scripts to lock
down a xen machine ? or a bridging setup ?

I don't understand too much about this bridging networking, so I
wouldn't really know how to go about creating an iptables script for
the host.

Thanks!!

Dana

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users