[Xen-users] debian squeeze + xen4 + antispoof ?

To:	"xen-users@xxxxxxxxxxxxxxxxxxx" <xen-users@xxxxxxxxxxxxxxxxxxx>
Subject:	[Xen-users] debian squeeze + xen4 + antispoof ?
From:	Shin Bong-Ho <hopoo@xxxxxxxxxx>
Date:	Wed, 26 Jan 2011 15:45:38 +0900
Delivery-date:	Wed, 26 Jan 2011 02:30:15 -0800
Envelope-to:	www-data@xxxxxxxxxxxxxxxxxxx
List-help:	<mailto:xen-users-request@lists.xensource.com?subject=help>
List-id:	Xen user discussion <xen-users.lists.xensource.com>
List-post:	<mailto:xen-users@lists.xensource.com>
List-subscribe:	<http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe:	<http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
Sender:	xen-users-bounces@xxxxxxxxxxxxxxxxxxx
User-agent:	Mozilla/5.0 (Windows; U; Windows NT 6.1; ko; rv:1.9.2.13) Gecko/20101207 Thunderbird/3.1.7

Hello.

I want to know how to configure debian squeeze + xen4 + antispoof .

I am using this line in xend-config.sxp
]# vi /etc/xen/xend-config.sxp
(network-script 'network-bridge antispoof=yes')

Under XEN 4.0.1 it is not working

Next is the output of iptables -L after booting

Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED PHYSDEV match
--physdev-out vif4.0
ACCEPT all -- anywhere anywhere PHYSDEV match --physdev-in vif4.0
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED PHYSDEV match
--physdev-out vif3.0
ACCEPT all -- anywhere anywhere PHYSDEV match --physdev-in vif3.0
ACCEPT all -- anywhere anywhere PHYSDEV match --physdev-in peth0

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

how to add correct iptables RULE.

Thanks.

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

WARNING - OLD ARCHIVES

xen-users

[Xen-users] debian squeeze + xen4 + antispoof ?