WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

Re: [Xen-users] vif-common.sh and iptables

To: Andrew McGlashan <andrew.mcglashan@xxxxxxxxxxxxxxxxxxxxx>
Subject: Re: [Xen-users] vif-common.sh and iptables
From: Teck Choon Giam <giamteckchoon@xxxxxxxxx>
Date: Thu, 28 Apr 2011 14:59:07 +0800
Cc: Dmitry Nedospasov <dmitry@xxxxxxxxx>, xen-users@xxxxxxxxxxxxxxxxxxx
Delivery-date: Thu, 28 Apr 2011 00:01:49 -0700
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=0KWgrQYPRFE7XiyCrbnaoJRc3YiRlaTvW0IfSHlSHm8=; b=e2mxp5o7JiWV7TNSEXooYwIBJg6bxQuT3Z+Cd0kDgwQeKkvYGjtW+tcZa1Y5KBTprN zZcKoQYSZmY4ZkiACwbaWtgh4Q2E0PRI0iSsA4vrwJQMefYum0VnhhpYYANi45W8uV2w 9HrYAlM4SLAFPwLwf66r5PKJ1R3XnYTOy9wsk=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=qqc1/STwxS08ZZhkLsQX4xzQ8bc6uCP8wP37J12BhETSX7fcORrLHPGl2oEgb5Rt7r iQcLc6RXovPTUKVWTtR6NnSquhwpf1ePboynHFG8CFVS5mpoMuWbJp1T7V09HIJEp07I a3DPq7//A1s/ttNDQ0Ai+L7hcIuF0vLVg8YJA=
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
In-reply-to: <BANLkTik5yAvuwzb5uMfNVm3ba8KCMfL1BQ@xxxxxxxxxxxxxx>
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References: <20110426110624.GA641@xxxxxxxxxxxxxxxxxxxxxxxxxxx> <4DB6B854.2080904@xxxxxxxxxxxxxxxxxxxxx> <BANLkTi=2wraBAtz-YVGfsEHnmNPGBF7AdQ@xxxxxxxxxxxxxx> <4DB785FB.603@xxxxxxxxxxxxxxxxxxxxx> <BANLkTik5yAvuwzb5uMfNVm3ba8KCMfL1BQ@xxxxxxxxxxxxxx>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
On Thu, Apr 28, 2011 at 12:22 PM, Teck Choon Giam
<giamteckchoon@xxxxxxxxx> wrote:
> On Wed, Apr 27, 2011 at 10:56 AM, Andrew McGlashan
> <andrew.mcglashan@xxxxxxxxxxxxxxxxxxxxx> wrote:
>> Hi Teck,
>>
>> Teck Choon Giam wrote:
>>>
>>> On Tue, Apr 26, 2011 at 8:19 PM, Andrew McGlashan
>>>>
>>>> That caused me issues and those settings were in place due to
>>>> "anti-spoofing" setup.
>>>>
>>>> I dropped anti-spoofing to "fix" my setup somewhat.  Until I did that, I
>>>> couldn't get to the DomU machines directly via the bridged interface.
>>>>
>>>> Now I can get through, but there are still issues that are not resolved
>>>> [1]
>>>> -- sometimes I connect, sometimes I don't; I really need a fix for this.
>>>>
>>>> [1]  http://comments.gmane.org/gmane.comp.emulators.xen.user/66214
>>>>
>>>
>>> Are you looking for a patch to support anti-spoof feature for tap
>>> devices?  If so, which xen version you are looking for?  I have
>>> patches to support tap devices when anti-spoof feature is enabled.
>>
>> Perhaps, do you think that will help in this situation?
>>
>> #  cat /etc/debian_version
>> 6.0.1
>>
>>
>> #  dpkg-query -l|grep xen|awk '{print $1,$2,$3}'
>> ii libxenstore3.0 4.0.1-2
>> ii linux-image-2.6.32-5-xen-amd64 2.6.32-31
>> ii xen-hypervisor-4.0-amd64 4.0.1-2
>> ii xen-tools 4.2-1
>> ii xen-utils-4.0 4.0.1-2
>> ii xen-utils-common 4.0.0-1
>> ii xenstore-utils 4.0.1-2
>>
>>
>> How would the patch be implemented?
>>
>> Thanks.
>>
>> --
>> Kind Regards
>> AndrewM
>>
>> Andrew McGlashan
>> Broadband Solutions now including VoIP

Oops... sorry didn't read the link you provided earlier on.  You may
ignore the patch I posted as that is for tap devices with antispoofing
enabled.  Perhaps you want to post your dom0 network configuration?
>From the linked posts, you seems like using xen provided network
configuration instead of using vendor provided network configuration?
Have you look at the following?

http://wiki.debian.org/Xen#Dom0_.28host.29
Especially http://wiki.debian.org/BridgeNetworkConnections

Hope this helps.

Thanks.

Kindest regards,
Giam Teck Choon

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

<Prev in Thread] Current Thread [Next in Thread>