Re: [Xen-devel] Network issues with SuSE firewall

[Ian Pratt <Ian.Pratt@xxxxxxxxxxxx>]

> > I'm afraid I'm not entirely surprised that xen_nat_enable doesn't
> > play well with your firewall. 
> 
> I'll do a little more diagnosis in the future.  What I think
> happened, though, is that the NAT's nat* rules somehow discarded
> the filter* rules.  I was also getting some complaints about
> mangle* needing to load the iptables module, which was not found
> (this was when I was trying to re-add my default rules).

I fear the xen_nat_enable script basically does a 'flush all
rules' to start with. Someone who understands iptables better
should be able to fix this...

> 2) Hmmm -- this does not work.  Any quick guess what to try fixing?

> $ xenctl domain list
> id: 0 (Domain-0)
>   processor: 0
>   has cpu: true
>   state: 0 active
>   mcu advance: 10
>   total pages: 192000
> id: 2 (XenoLinux)
>   processor: 0
>   has cpu: false
>   state: 1 stopped
>   mcu advance: 10
>   total pages: 24576

Did you start a domain 1 that then exited? 

The IP address of you're currently running domain (id: 2) should
be 169.254.1.2

"state: 1 stopped" doesn't look good, though. Have you actually
"xenctl domain start"'ed the domain?

Ian


-------------------------------------------------------
This SF.Net email sponsored by: ApacheCon 2003,
16-19 November in Las Vegas. Learn firsthand the latest
developments in Apache, PHP, Perl, XML, Java, MySQL,
WebDAV, and more! http://www.apachecon.com/
_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/xen-devel