|
|
|
|
|
|
|
|
|
|
xen-users
Re: [Xen-users] Squid in bridging mode
Hi,
i think it's a better practise to leave dom0 for administrative tasks and
setup squid in a domU.
By using the default xen-network-bridge, you're able to setup iptables
in the domU without using any bridge-specific stuff.
David schrieb:
> Still learning Xen, and would like to know if it's possible to run Squid
> in D0 when running in bridging mode. I have iptables and ebtables
> going, and am able to log packets with those, but can't seem to get any
> traffic out of the bridge into Squid in D0 (or through iptables in D0,
> for that matter).
>
> Information I've gathered so far is that I need
> net.bridge.bridge-nf-call-iptables = 1, and need the following command
> to have packets accepted by the bridge:
> ebtables -t broute -A BROUTING -p ipv4 --ip-proto 6 --ip-dport 80 -j
> redirect --redirect-target ACCEPT
>
> Not sure what I need from here. Are there other bridge or iptables
> settings I need to check? Is there some special iptables command I'm
> missing to have the network traffic go through D0 when bridging?
>
> Thanks,
> David
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> Xen-users mailing list
> Xen-users@xxxxxxxxxxxxxxxxxxx
> http://lists.xensource.com/xen-users
--
Stephan Seitz
Senior System Administrator
*netz-haut* e.K.
multimediale kommunikation
zweierweg 22
97074 würzburg
fon: +49 931 2876247
fax: +49 931 2876248
web: www.netz-haut.de <http://www.netz-haut.de/>
registriergericht: amtsgericht würzburg, hra 5054
s.seitz.vcf
Description: Vcard
signature.asc
Description: OpenPGP digital signature
_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users
|
|
|
|
|