WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

Re: [Xen-users] Bridge and Internet

To: Enderson Maia <endersonmaia@xxxxxxxxx>
Subject: Re: [Xen-users] Bridge and Internet
From: Bráulio Gergull <gergull@xxxxxxxxxxxxx>
Date: Fri, 24 Mar 2006 13:43:58 -0300 (BRT)
Cc: xen-users@xxxxxxxxxxxxxxxxxxx
Delivery-date: Fri, 24 Mar 2006 17:41:00 +0000
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
In-reply-to: <228840e70603240553y128437edmaf7a64df13282b43@xxxxxxxxxxxxxx>
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
Organization: Getnet
References: <228840e70603240553y128437edmaf7a64df13282b43@xxxxxxxxxxxxxx>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
Hi Enderson,

You are probably having TX checksum errors on your interfaces.

Try to issue the following command for all interfaces on your domains:

ethtool -K ethN tx off

ethN should be eth0, eth1, ...

rgrds,
Bráulio Gergull

On Mar 24, 2006 10:53 AM, Enderson Maia <endersonmaia@xxxxxxxxx> wrote:

> I already have my domU (fw) as a firewall, connecting to ADSL.
>
> Using two bridges xenbr0 (lan), xenbr2 (net-adsl)
>
> I can access internet from 'fw', and did iptables rules to masquerade
> my access from
> dom0 and other domUs.
>
> The things looks like it has to work, but I can find the problem.
>
> The situation is:
> * I have full internet access from 'fw'.
> * From dom0 or other domUs connected to xenbr0, I can ping
> www.google.com
> having the dnscache server at 'fw', and get ICMP REPLY.
> * BUT, I can't connect to any services , ssh, ftp, http and so on.
>
> Connecting from 'fw' to a remote server I have ssh access, I can see
> the packets arriving
> when I try http or ssh acces to this remote server from my dom0, but
> these packtes don't come back.
>
> If u need some more information, let me know. I think some tcpdump
> from 'fw' and the remote server I'm trying to access could be
> intersting.
>
>
>
>
>
>
> --
> --
> Enderson Maia
>
> ICQ: 8817986
> MSN: endersonmaia[arroba]gmail[ponto]com
> Linux User: 286130
> =============================
>
> _______________________________________________
> Xen-users mailing list
> Xen-users@xxxxxxxxxxxxxxxxxxx
> http://lists.xensource.com/xen-users
>


_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

<Prev in Thread] Current Thread [Next in Thread>