Re: [Xen-users] How to add iptables modules to Domu Kernel??

[Sadique <sadique@xxxxxxxxxxxxxxxxxxx>]

I am not sure whether iptables module is compiled into the Dom-U kernel
by default in xen binary packages.
The best option for you should be to complie xen kernel from source and
add iptables support statically to the kernel.

make menuconfig
Networking  ---> Networking options  --->  Network packet filtering
(replaces ipchains)  --->  Core Netfilter Configuration  --->  Netfilter
Xtables support (required for ip_tables) and do enable all modules
included in that as per your need.
Then go to - Networking  ---> Networking options  --->  Network packet
filtering (replaces ipchains)  ---> IP: Netfilter Configuration  ---> 
IP tables support (required for filtering/masq/NAT)

You can only go to the second step after doing the first one.


It's best you add the iptables support statically into the kernel rather than 
enabling it as a module. Why? If you compile it as a module you need to copy 
the module to every Dom-U manually.

Thanks
Sadique

miguel c wrote:

> Hi, I'm running xen 2.0 in a Fedora Core 3 distro. My problem is that
> I want to configure a virtual machine so that works as a
> firewall/router. So, I need iptables working on this one.
> Unfortunately I must have some modules loaded such as ip_tables,
> iptables_nat, etc.
> Where can I do this without making mad trying it?
> Thank you  very much
>
>
>
> _______________________________________________
> Xen-users mailing list
> Xen-users@xxxxxxxxxxxxxxxxxxx
> http://lists.xensource.com/xen-users
>
>


_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users