|   | 
      | 
  
  
      | 
      | 
  
 
     | 
    | 
  
  
     | 
    | 
  
  
    |   | 
      | 
  
  
    | 
         
xen-devel
Re: [Xen-devel] Bridged Networking in Dom 0 and Virtual NIC inWindows	XP
 
Dear All,
 Instead of flushing the forward chain in the filter table after win xp 
home hvm dom U has started, I have commented out/deactivated the 
following rule in the default Fedora 11 firewall configuration:
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
This rule is the cause of all trouble.
 By deactivating this rule, I have totally eliminated the need to flush 
the forward chain in the filter table after win xp home hvm dom U has 
started.
 Hence now my Win XP Home HVM Dom U could access the outside world 
without any problem.
--
Mr. Teo En Ming (Zhang Enming) Dip(Mechatronics Engineering) 
BEng(Hons)(Mechanical Engineering)
Technical Support Engineer
Information Technology Department
Asiasoft Online Pte Ltd
Tampines Central 1 #04-01 Tampines Plaza
Singapore 529541
Republic of Singapore
Mobile: +65-9648-9798
MSN: teoenming@xxxxxxxxxxx
Alma Maters: Singapore Polytechnic, National University of Singapore
On 08/24/2009 11:20 PM, Mr. Teo En Ming (Zhang Enming) wrote:
 
Hi All,
My conclusions earlier in the day were totally erroneous.
The problem is with the FORWARD chain in the filter table.
 After Win XP Home 32-bit HVM Guest has started, I flushed the forward 
chain in the filter table with the command
# iptables -t filter -F FORWARD
 This allows my WinXP Home HVM guest to obtain IP address successfully 
from the wireless router using DHCP.
Success!!!
 This is still a temporary fix. I still have to write the correct rules 
for the FORWARD chain in the filter table.
 The following rules which are recommended by the XenNetworking Wiki 
did not work for me:
 iptables -A FORWARD -m physdev --physdev-in eth0 --physdev-out '!' 
eth0  -j
ACCEPT
 iptables -A FORWARD -m physdev --physdev-out eth0 --physdev-in '!' 
eth0  -j
ACCEPT
 Neither did the rules automatically added by xend after winxp hvm has 
started worked for me.
 Anyone knows the correct iptables rules to add to the forward chain in 
the filter table?
 
 
_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel
 
 |   
 
 | 
    | 
  
  
    |   | 
    |