[Xen-users] Temporary iptables failure with xen-3.0.2-2

[Gabor HALASZ <halasz.g@xxxxxxxxxxx>]

Hi!

When I starts my domains, the hotplug script sometimes fails. This is a 
temprorary failure, after a few seconds it works well again.
ga-k8nf-9-4:/etc/xen# xm create ApacheSERVICE
Using config file "ApacheSERVICE".
Error: Device 0 (vif) could not be connected. Hotplug scripts not working.
ga-k8nf-9-4:/etc/xen# xm create ApacheSERVICE
Using config file "ApacheSERVICE".
Started domain ApacheSERVICE

My vif configureation:

#----------------------------------------------------------------------------
vif = [
    "ip=192.168.52.4, script=vif-route netdev=dummy2",
    "ip=192.168.51.4, script=vif-route netdev=dummy1"
]
hostname="service.xxx.xx"
#----------------------------------------------------------------------------

A part of xen-hotplug.log:

+ handle_iptable
+ iptables -L -n
+ '[' 192.168.51.4 '!=' '' ']'
+ local addr
+ frob_iptable -s 192.168.51.4
+ '[' online == online ']'
+ local c=-A
+ iptables -A FORWARD -m physdev --physdev-in vif19.1 -s 192.168.51.4 -j 
ACCEPT
+ '[' -A == -D ']'
+ log err 'iptables -A FORWARD -m physdev --physdev-in vif19.1 -s' 
'192.168.51.4 -j ACCEPT failed.
If you are using iptables, this may affect networking for guest domains.'
+ local level=err
+ shift
+ logger -p daemon.err -- /etc/xen/scripts/vif-route: 'iptables -A 
FORWARD -m physdev --physdev-in vif19.1 -s' '192.168.51.4 -j ACCEPT failed.
If you are using iptables, this may affect networking for guest domains.'
+ frob_iptable -p udp --sport 68 --dport 67
+ '[' online == online ']'
+ local c=-A
+ iptables -A FORWARD -m physdev --physdev-in vif19.1 -p udp --sport 68 
--dport 67 -j ACCEPT
+ '[' -A == -D ']'
+ log err 'iptables -A FORWARD -m physdev --physdev-in vif19.1 -p' udp 
--sport 68 --dport '67 -j ACCEPT failed.
If you are using iptables, this may affect networking for guest domains.'
+ local level=err
+ shift
+ logger -p daemon.err -- /etc/xen/scripts/vif-route: 'iptables -A 
FORWARD -m physdev --physdev-in vif19.1 -p' udp --sport 68 --dport '67 
-j ACCEPT failed.
If you are using iptables, this may affect networking for guest domains.'

The xend-debug.log is empty.

Xen version 3.0.2-2 (root@xxxxxx) (gcc version 3.4.4 20050314 
(prerelease) (Debian 3.4.3-13)) Fri May 19 13:24:37 CEST 2006
Latest ChangeSet: Mon May 15 07:51:55 2006 +0100 9679:7ae0f83cf355

What can I do?

--
Gabor HALASZ <halasz.g@xxxxxxxxxxx>

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users