WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

[Xen-users] Startup-script changing firewall settings each time domu (re

To: <xen-users@xxxxxxxxxxxxxxxxxxx>
Subject: [Xen-users] Startup-script changing firewall settings each time domu (re)starts or gets created
From: "Guido Hecken" <guido.hecken@xxxxxxxxxxxxx>
Date: Thu, 3 Feb 2011 08:26:26 +0100
Delivery-date: Wed, 02 Feb 2011 23:27:41 -0800
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References: <AANLkTimBUd-Fs+Z2KEx+8+XpLs015QLO5JCXqj066SMx@xxxxxxxxxxxxxx><20110129170217.GJ2754@xxxxxxxxxxx><AANLkTi=RuN4TOEoUFmMo8Qb1bJxG+CJGyWNLEU+_yYBQ@xxxxxxxxxxxxxx><20110129182514.GL2754@xxxxxxxxxxx><AANLkTimwP68Cv25U8RZfHi8FGDwBa-AqBG994c_fdSW6@xxxxxxxxxxxxxx><20110129184929.GN2754@xxxxxxxxxxx><AANLkTimVX1mWsGkYuULh=1gcoCMf2sO-QLE_rmQAhJvR@xxxxxxxxxxxxxx> <20110203063536.GL2754@xxxxxxxxxxx>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
Thread-index: AcvDbZdJUKWAQwjAQR2panrkQOdvNQAA5oCw
Thread-topic: [Xen-users] Startup-script changing firewall settings each time domu (re)starts or gets created
Hi list,

has anyone an idea on where to put some custom startup-script in
addition to the default scripts (network-bridge and vif-bridge).
I have xen bridge setup running fine and want to put some firewall rules
in place and have them refreshed, every time a special domu is created
or (re)started.
Something like this:
...
INTERFACE=`xm list $NAME | tail -1 | awk '{print $2}'`
iptables -A FORWARD -m physdev --physdev-in vif${INTERFACE}.0 -j $IN
iptables -A $IN -s 192.168.161.82 -p tcp --sport 3389 -d 192.168.161.216
-j ACCEPT
...
The Script is working fine an can be executed manually with the desired
results.

Any input is highly welcome

Guido

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

<Prev in Thread] Current Thread [Next in Thread>