Re: [Xen-users] IP blocking

To:	shacky <shacky83@xxxxxxxxx>
Subject:	Re: [Xen-users] IP blocking
From:	mail4dla@xxxxxxxxxxxxxx
Date:	Mon, 6 Aug 2007 14:53:36 +0200
Cc:	xen-users@xxxxxxxxxxxxxxxxxxx
Delivery-date:	Mon, 06 Aug 2007 05:51:18 -0700
Dkim-signature:	a=rsa-sha1; c=relaxed/relaxed; d=googlemail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references; b=ZYlg8s7lColVd0uvZXPTfyQcxXvasaRILCpgOjymPdCASIHH55p3mn3VBlZBz9psRLOnESmpt2mJOWnWnA5woUdtArlRO7ZkenK/j5WA1ISZ0Q66xz/1VS7fs9VhBcTQPpzAkvf7SHCGheOTUg9UqVrkCMaGECu813e/ey19kOM=
Domainkey-signature:	a=rsa-sha1; c=nofws; d=googlemail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references; b=hJnxddTE1HYWM1p969yu7kCvW8btcjsqlgoA2DxISgn48PVm8KVR0YCM5bGe0SiOioKGyBvk29WKGQjB6jEgO1FpnooRyonFWrp3OXCAfttmIGBB+h4wqGFbbt33cwKO6TfEOpeamYHeKm7lKa8vFKUW+fiQRJ5/HP9p1fon+no=
Envelope-to:	www-data@xxxxxxxxxxxxxxxxxx
In-reply-to:	<7fedbc910708060518s510357cdx7e3be43159616815@xxxxxxxxxxxxxx>
List-help:	<mailto:xen-users-request@lists.xensource.com?subject=help>
List-id:	Xen user discussion <xen-users.lists.xensource.com>
List-post:	<mailto:xen-users@lists.xensource.com>
List-subscribe:	<http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe:	<http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References:	<7fedbc910708060518s510357cdx7e3be43159616815@xxxxxxxxxxxxxx>
Sender:	xen-users-bounces@xxxxxxxxxxxxxxxxxxx

Hi,

I suggest you stop to bridge the DomUs directly to the network.
Then, you can use standard Linux mechanisms in routing and filtering. You can even use point-to-point networking as discussed earlier on this list.
iptables should also be able to do this on bridge level, but I would not consider this a clean approach.

Cheers
dla

On 8/6/07, shacky < shacky83@xxxxxxxxx> wrote:

Hi.

How I can assing a given IP address to a given domU and force the user
of that domU to use that IP address and not all other?
I don't want the user to change the IP address of his virtual machine
in /etc/network/interfaces with one ore more IP addresses which are
not assigned to him.
In addition I don't want the user to create more virtual interface
(eth0:x) than he is allowed to use (I allow each domU to have only two
IP addresses).

Could you explain me this, please?

Thank you very much!

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

WARNING - OLD ARCHIVES

xen-users

Re: [Xen-users] IP blocking