This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
Home Products Support Community News


Re: [Xen-users] Iptables and antispoof?

To: xen-users@xxxxxxxxxxxxxxxxxxx
Subject: Re: [Xen-users] Iptables and antispoof?
From: "Ulrich Windl" <ulrich.windl@xxxxxxxxxxxxxxxxxxxx>
Date: Mon, 26 Feb 2007 09:44:25 +0100
Delivery-date: Mon, 26 Feb 2007 00:44:34 -0800
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
In-reply-to: <003c01c757a5$54804020$7905a8c0@tank>
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
Organization: Universitaet Regensburg, Klinikum
Priority: normal
References: <E1HKhfk-0003fE-EF@host-192-168-0-1-bcn-london>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
On 23 Feb 2007 at 18:49, Larry Ludwig wrote:

> Hi,
> How can we get antispoof to work correctly?  I can still assign any ip
> address in domU
> The goal is is to prevent domU instances from using IP address assigned to
> other customers.

I'm afraid a user can do to a virtual box what he can do to a real box. Normal 
UNIX users cannot assign IP adresses. Root can do. Root is responsible for the 
machine. What should XEN do about that?


> (network-script network-bridge vifnum=0 netdev=eth0 bridge=xenbr0
> antispoof=yes)
> (vif-antispoof yes)
> Is in the xend-config.sxp file and using FC6 rpms.
> Please help..
> -L
> --
> Larry Ludwig
> _______________________________________________
> Xen-users mailing list
> Xen-users@xxxxxxxxxxxxxxxxxxx
> http://lists.xensource.com/xen-users

Xen-users mailing list

<Prev in Thread] Current Thread [Next in Thread>