WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/

Home

xen-users

[Top] [All Lists]

Re: [Xen-users] If Dom0 was compramised

from [Fajar A. Nugraha]

[Permanent Link][Original]

To:	Ian Tobin <itobin@xxxxxxxxxxxxx>
Subject:	Re: [Xen-users] If Dom0 was compramised
From:	"Fajar A. Nugraha" <fajar@xxxxxxxxx>
Date:	Thu, 20 May 2010 17:11:19 +0700
Cc:	Xen User-List <xen-users@xxxxxxxxxxxxxxxxxxx>
Delivery-date:	Thu, 20 May 2010 03:12:09 -0700
Envelope-to:	www-data@xxxxxxxxxxxxxxxxxxx
In-reply-to:	<039E0B4AA9103344A80DA55DDDC76A933B29A3@xxxxxxxxxxxxxxxxxxxxxx>
List-help:	<mailto:xen-users-request@lists.xensource.com?subject=help>
List-id:	Xen user discussion <xen-users.lists.xensource.com>
List-post:	<mailto:xen-users@lists.xensource.com>
List-subscribe:	<http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe:	<http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References:	<46C13AA90DB8844DAB79680243857F0F061FCD@xxxxxxxxxxxxxxxxxxx> <AANLkTinmcoeqGi9Fgi0H6GGtdoBlCyads0iEyp9lFGGp@xxxxxxxxxxxxxx> <039E0B4AA9103344A80DA55DDDC76A933B29A3@xxxxxxxxxxxxxxxxxxxxxx>
Sender:	xen-users-bounces@xxxxxxxxxxxxxxxxxxx

On Thu, May 20, 2010 at 5:06 PM, Ian Tobin <itobin@xxxxxxxxxxxxx> wrote:
> Curious, what would be the best way to secure the Dom0.
>
> Ive tried iptables before but then prevented access to the DomUs.

Depends on your setup. If you use bridge networking, and
/proc/sys/net/bridge/bridge-nf-call-iptables is 0 (which is 1 by
default), domU traffic should be unaffected by dom0's iptables.

-- 
Fajar

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

[More with this subject...]

<Prev in Thread]	Current Thread	[Next in Thread>
[Xen-users] If Dom0 was compramised, Jonathan Tripathy Re: [Xen-users] If Dom0 was compramised, Fajar A. Nugraha RE: [Xen-users] If Dom0 was compramised, Ian Tobin Re: [Xen-users] If Dom0 was compramised, Fajar A. Nugraha <= RE: [Xen-users] If Dom0 was compramised, Ian Tobin Re: [Xen-users] If Dom0 was compramised, Fajar A. Nugraha RE: [Xen-users] If Dom0 was compramised, Ian Tobin Re: [Xen-users] If Dom0 was compramised, Olivier B. RE: [Xen-users] If Dom0 was compramised, Ian Tobin Re: [Xen-users] If Dom0 was compramised, Steve Spencer Re: [Xen-users] If Dom0 was compramised, Simon Hobson Re: [Xen-users] If Dom0 was compramised, Olivier B. RE: [Xen-users] If Dom0 was compramised, Jonathan Tripathy

Previous by Date:	Re: [Xen-users] If Dom0 was compramised, Olivier B.
Next by Date:	RE: [Xen-users] If Dom0 was compramised, Ian Tobin
Previous by Thread:	RE: [Xen-users] If Dom0 was compramised, Ian Tobin
Next by Thread:	RE: [Xen-users] If Dom0 was compramised, Ian Tobin
Indexes:	[Date] [Thread] [Top] [All Lists]

This site is hosted by Citrix