WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

Re: [Xen-users] iptables and state matches (established, related)

To: "Tomas Lund" <tlund@xxxxxx>
Subject: Re: [Xen-users] iptables and state matches (established, related)
From: "John Hannfield" <hal9020@xxxxxxxxx>
Date: Sat, 28 Apr 2007 13:49:58 +0100
Cc: Andrey Oreshnikov <elride@xxxxxxxxx>, xen-users@xxxxxxxxxxxxxxxxxxx
Delivery-date: Sat, 28 Apr 2007 05:48:36 -0700
Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=djOkTO/UPdyAXjBc7QDbIveSzFU42lluh1TGTC22GtJlFzSwso4fH7L+zsdoCosL9x+WCNbkuiDw7ATyoBrj1KzQtGBKqFW5jjqkCkKgjiJkepI3wC37EGrX66Uxv89P2MRcW82hTRcwLCLFRE3Jo8hIjICjCIvbaKOQkAxP6IM=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=X/KUlnw/fBXNBa9admCWKDdKExiMTRGUEc3wvFcpIiSQKxZ6vFxa7gNr4BzCvCNsXB2jSxrv+PKAjsL0bJ19Jqv4N64hTrinokWH8/nvheZMSywkHgXJl+e6ooZ8zfulKxfYyb1TpJSAjB+RVZs9Yh/Kk21VRSZB6YzWvKpJgng=
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
In-reply-to: <Pine.LNX.4.61.0704201317390.4846@xxxxxxxxxxx>
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References: <c8749d500704100344n14cbf826x3cb70dc77373ce97@xxxxxxxxxxxxxx> <Pine.LNX.4.61.0704201317390.4846@xxxxxxxxxxx>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
This is a known problem with Xen 3.0.x  and iptables connection tracking.
Connection tracking and state filtering only works as long as xen is
not running.
Try doing this:

echo "0" >/proc/sys/net/bridge/bridge-nf-call-iptables

That fixed it for me.


--

John

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users