xen-users

[Top] [All Lists]

Re: [Xen-users] Iptables and Xen

from [Alexandre Chapellon]

[Permanent Link][Original]

To:	xen-users@xxxxxxxxxxxxxxxxxxx
Subject:	Re: [Xen-users] Iptables and Xen
From:	Alexandre Chapellon <a.chapellon@xxxxxxxxx>
Date:	Fri, 10 Jun 2011 09:51:11 +0200
Delivery-date:	Fri, 10 Jun 2011 00:52:18 -0700
Envelope-to:	www-data@xxxxxxxxxxxxxxxxxxx
In-reply-to:	<BANLkTi=z94zTWkR0BrUdPM48oVSChyj=sA@xxxxxxxxxxxxxx>
List-help:	<mailto:xen-users-request@lists.xensource.com?subject=help>
List-id:	Xen user discussion <xen-users.lists.xensource.com>
List-post:	<mailto:xen-users@lists.xensource.com>
List-subscribe:	<http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe:	<http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References:	<BANLkTi=z94zTWkR0BrUdPM48oVSChyj=sA@xxxxxxxxxxxxxx>
Sender:	xen-users-bounces@xxxxxxxxxxxxxxxxxxx
User-agent:	Mozilla/5.0 (X11; U; Linux i686; fr; rv:1.9.2.17) Gecko/20110414 Lightning/1.0b2 Thunderbird/3.1.10

Le 10/06/2011 08:32, Abhishek Bichhawat a écrit :

Hi,

I have been trying to filter out domU packets from dom0 using iptables.
I tried the following:

iptables -I FORWARD -m physdev --physdev-in peth0 --physdev-out vif1.0 -j domU
iptables -A domU -j DROP

This rules matches flawlessly here (debian 2.6.32-5-xen-amd64).
Are you sure you specify the correct ifnames in your iptables rules?

I expect that this should drop all the packets meant for domU, but this does not happen in my case. The domU is able to receive and send packets as before.

kindly help.

--
Thanks and Regards,
Abhishek Bichhawat
Visiting Scholar
Dept. of Computing
Macquarie University,
Sydney, Australia.
_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

[More with this subject...]

<Prev in Thread]	Current Thread	[Next in Thread>
[Xen-users] Iptables and Xen, Abhishek Bichhawat Re: [Xen-users] Iptables and Xen, Alexandre Chapellon <= RE: [Xen-users] Iptables and Xen, Dustin Henning Re: [Xen-users] Iptables and Xen, Tapas Mishra

Previous by Date:	[Xen-users] Iptables and Xen, Abhishek Bichhawat
Next by Date:	[Xen-users] Munin?, Tobias Matthaeus
Previous by Thread:	[Xen-users] Iptables and Xen, Abhishek Bichhawat
Next by Thread:	RE: [Xen-users] Iptables and Xen, Dustin Henning
Indexes:	[Date] [Thread] [Top] [All Lists]