WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

Re: [Xen-users] Firewalling Xen?

To: xen-users@xxxxxxxxxxxxxxxxxxx
Subject: Re: [Xen-users] Firewalling Xen?
From: Lists <lists@xxxxxxxxxxxxx>
Date: Wed, 17 Dec 2008 09:56:58 +0100 (CET)
Delivery-date: Wed, 17 Dec 2008 00:57:55 -0800
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
In-reply-to: <14915851.141229329317606.JavaMail.root@xxxxxxxxxxxxxxxxxx>
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
Thank you *all* for your help and advice.  I'll get cracking right away.

Your help is much apreciated.

Thanks.

--
eco

----- lists@xxxxxxxxxxxxx wrote:

> Hi all,
> 
> I have the following Xen config and I was wondering what you'd
> recomend as a firewall setup.
> 
> 
> Dom0 - 198.175.98.50
> Dom1 - 198.175.98.63 (Bridged)
> Dom2 - 198.175.98.62 (Bridged)
> Dom3 - 198.175.98.61 (Bridged)
> Dom4 - 198.175.45.12 (Bridged)
> 
> I'm wondering how to setup a firewall for Dom0 when all traffic for
> the DomUs go 'through' it.  How should the firewall take this into
> account?
> 
> On a side note, I read a more secure way was to have the 'primary' Dom
> to be a DomU firewall to avoid exploits to the Dom0 but I can't find
> proper documentation for such a setup.  Can someone point me in the
> right direction please?
> 
> Many thanks.
> --
> eco
> 
> _______________________________________________
> Xen-users mailing list
> Xen-users@xxxxxxxxxxxxxxxxxxx
> http://lists.xensource.com/xen-users

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

<Prev in Thread] Current Thread [Next in Thread>