xen-users

[Top] [All Lists]

Re: [Xen-users] Iptables and antispoof?

from [Ulrich Windl]

[Permanent Link][Original]

To:	xen-users@xxxxxxxxxxxxxxxxxxx
Subject:	Re: [Xen-users] Iptables and antispoof?
From:	"Ulrich Windl" <ulrich.windl@xxxxxxxxxxxxxxxxxxxx>
Date:	Mon, 26 Feb 2007 09:44:25 +0100
Delivery-date:	Mon, 26 Feb 2007 00:44:34 -0800
Envelope-to:	www-data@xxxxxxxxxxxxxxxxxx
In-reply-to:	<003c01c757a5$54804020$7905a8c0@tank>
List-help:	<mailto:xen-users-request@lists.xensource.com?subject=help>
List-id:	Xen user discussion <xen-users.lists.xensource.com>
List-post:	<mailto:xen-users@lists.xensource.com>
List-subscribe:	<http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe:	<http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
Organization:	Universitaet Regensburg, Klinikum
Priority:	normal
References:	<E1HKhfk-0003fE-EF@host-192-168-0-1-bcn-london>
Sender:	xen-users-bounces@xxxxxxxxxxxxxxxxxxx

On 23 Feb 2007 at 18:49, Larry Ludwig wrote:

> Hi,
> 
> How can we get antispoof to work correctly?  I can still assign any ip
> address in domU
> 
> The goal is is to prevent domU instances from using IP address assigned to
> other customers.

I'm afraid a user can do to a virtual box what he can do to a real box. Normal 
UNIX users cannot assign IP adresses. Root can do. Root is responsible for the 
machine. What should XEN do about that?

Regards,
Ulrich


> 
> (network-script network-bridge vifnum=0 netdev=eth0 bridge=xenbr0
> antispoof=yes)
> (vif-antispoof yes)
> 
> Is in the xend-config.sxp file and using FC6 rpms.
> 
> Please help..
> 
> -L
>  
> --
> Larry Ludwig
> 
> 
> 
> _______________________________________________
> Xen-users mailing list
> Xen-users@xxxxxxxxxxxxxxxxxxx
> http://lists.xensource.com/xen-users



_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

[More with this subject...]

<Prev in Thread]	Current Thread	[Next in Thread>
[Xen-users] Iptables and antispoof?, Larry Ludwig Re: [Xen-users] Iptables and antispoof?, Ulrich Windl <= Re: [Xen-users] Iptables and antispoof?, Larry Ludwig

Previous by Date:	Re: [Xen-users] SWAP on domUs is not mounted., kanour-xen
Next by Date:	Re: [Xen-users] SWAP on domUs is not mounted., Tom Brown
Previous by Thread:	[Xen-users] Iptables and antispoof?, Larry Ludwig
Next by Thread:	Re: [Xen-users] Iptables and antispoof?, Larry Ludwig
Indexes:	[Date] [Thread] [Top] [All Lists]