Re: [Xen-users] Iptables and antispoof?

To:	<xen-users@xxxxxxxxxxxxxxxxxxx>
Subject:	Re: [Xen-users] Iptables and antispoof?
From:	"Larry Ludwig" <larrylud@xxxxxxxxx>
Date:	Mon, 26 Feb 2007 08:00:35 -0500
Cc:	ulrich.windl@xxxxxxxxxxxxxxxxxxxx
Delivery-date:	Mon, 26 Feb 2007 04:58:18 -0800
Dkim-signature:	a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:from:to:cc:subject:date:message-id:mime-version:content-type:content-transfer-encoding:x-mailer:in-reply-to:x-mimeole:thread-index; b=CgZM7es6LuhS6KS+ErnI1C+ybfbc4lPhBXmMuYPvkud1zz6k/Z8+mhvC4EPdw/gw9oEvFLy6Vy2hG+PIkZPYjhjL4lrjCExzqpSPiK8sdFwZcwscXUvndxnKaPcwHermyHtsCOEd+9bSLdO6cI0uKQXhcnMYF7a2TthFOzD8tk4=
Domainkey-signature:	a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:from:to:cc:subject:date:message-id:mime-version:content-type:content-transfer-encoding:x-mailer:in-reply-to:x-mimeole:thread-index; b=EL9lrvh4CdbwLo7Fnk0cKvXpAaV7M2sPJU54uyB/9Wo+CCqa7lKl1Ps74DpevcwVyC5G31vGkLJwlhNvXpvqczSYzoR2c5c/mpqkn327OQQoxrwR9nXo/pZx1OuCcat63XY3oN22X9qnB0NikwNcJrXkDAUdzlg0svU5yc+S0bM=
Envelope-to:	www-data@xxxxxxxxxxxxxxxxxx
In-reply-to:	<E1HLcOu-0006j9-D1@host-192-168-0-1-bcn-london>
List-help:	<mailto:xen-users-request@lists.xensource.com?subject=help>
List-id:	Xen user discussion <xen-users.lists.xensource.com>
List-post:	<mailto:xen-users@lists.xensource.com>
List-subscribe:	<http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe:	<http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
Sender:	xen-users-bounces@xxxxxxxxxxxxxxxxxxx
Thread-index:	AcdZiojedQ/crvV+RMyV3wvhwqJAUgAGzW5A

> ------------------------------
> 
> Message: 4
> Date: Mon, 26 Feb 2007 09:44:25 +0100
> From: "Ulrich Windl" <ulrich.windl@xxxxxxxxxxxxxxxxxxxx>
>
> I'm afraid a user can do to a virtual box what he can do to a 
> real box. Normal 
> UNIX users cannot assign IP adresses. Root can do. Root is 
> responsible for the 
> machine. What should XEN do about that?
> 

Then what is the purpose of antispoof?  I thought antispoof is like a level
3 switch that a domU can only then use the Ips assigned to it?  Explain then
what antispoof should be used for?

-L
 
--
Larry Ludwig
Empowering Media
1-866-792-0489 x600
Have you visited our customer service blog?
http://www.supportem.com/blog/



_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

WARNING - OLD ARCHIVES

xen-users

Re: [Xen-users] Iptables and antispoof?