This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
Home Products Support Community News


Re: [Xen-users] NET Network / Server running on internal Network not rea

To: "Robert M. Münch" <robert.muench@xxxxxxxxxxxxxxx>
Subject: Re: [Xen-users] NET Network / Server running on internal Network not reachable
From: "Christopher Isip" <cmisip@xxxxxxxxx>
Date: Wed, 9 Jul 2008 15:41:31 -0400
Cc: xen-users@xxxxxxxxxxxxxxxxxxx
Delivery-date: Wed, 09 Jul 2008 12:42:08 -0700
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to :subject:cc:in-reply-to:mime-version:content-type:references; bh=dW/TEO0AQ+3onJm6VHcmBYLPNiVssJGzPj2CShmdwZc=; b=aOe74yitiLE9NIWcd13OSzH/Y7ar8/KGLVMJKMQBVVfGCMwW2G7+Z69SqrixvBEVqj FaGp3lYsoDT9BlU7I1rweF1qouTh+lnY+8O8QBBGdsPuuplh0n7Pcsk11rEVzZhdI3i9 1W7zvjdgPbae12O8WcvWqvXP7vDhro41jkeus=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:cc:in-reply-to:mime-version :content-type:references; b=faTcJqkYoN1J3xWfF5Bl3qLzqAKtLyBYckbwSVU3wcFKQMAe8f7ItTIg6QpwZttF9+ RY2R0ZSoGJ/pk3eCFC9UB3KX4SmJnV1IbcnWcy71q77UXKXZQcgxjywQSTiXvvzzFBRh 4sgUvnXVHbvT+y524cmIxTS5olQxpWQ3GfmQo=
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
In-reply-to: <op.ud1d0ian3b5602@robby-laptop>
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References: <op.udzlyre33b5602@robby-laptop> <4873DFDA.2040808@xxxxxxxxx> <4bca5f6c0807081934l5f9869bfjf9a430bbae293ef5@xxxxxxxxxxxxxx> <op.ud1d0ian3b5602@robby-laptop>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx

On Wed, Jul 9, 2008 at 2:08 PM, Robert M. Münch <robert.muench@xxxxxxxxxxxxxxx> wrote:
On Wed, 09 Jul 2008 04:34:01 +0200, Christopher Isip <cmisip@xxxxxxxxx> wrote:

The easiest way to do IP masquerade is with shorewall.  Try the two
interface configuration with one interface the external and the other the
internal/bridged interface.

Hi Chris, I took a look into shorewall. I followed the information to setup a simple Xen system. But it doesn't work. I can't connect to the web-server. I always get a "conneciton refused".

Here is some output from the logging and TCPDUMP:

HTTP from DMZ/ (wget www.robertmuench.de)
Jul  9 16:16:29 FORWARD:REJECT:IN=vif3.0 OUT=eth0 SRC="" href="" target="_blank"> DST= LEN=65 TOS=0x00 PREC=0x00 TTL=63 ID=56283 DF PROTO=UDP SPT=32768 DPT=53 LEN=45

Here I tracked a wget So the requests comes in but is immediatly answered with something that rejects/refuses the connection to be established. Error message on the requester: connection refused.

root@eisxen:~/shorewall-config# tcpdump -i eth0 host and port 80

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 68 bytes
16:42:23.415056 IP ns.km1428.keymachine.de.54159 > eisxen.www: S 2049446876:2049446876(0) win 5840 <mss 1460,sackOK,timestamp 2303776659[|tcp]>
16:42:23.416084 IP eisxen.www > ns.km1428.keymachine.de.54159: R 0:0(0) ack 2049446877 win 0

In which mode do I need to run XEN, bridged, routed, nat? I have tried birdged and nat. Same effect, doesn't work.

Best regards.

Robert M. Münch


Can you access the webserver from within the xen domU?  You can try lynx maybe to see if it would even load.  Also try clearing the firewall between the domU with the web server, dom0  and wherever you are trying to access it from.  What distro is your domU?


Xen-users mailing list