WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

Re: [Xen-users] Bridge does not deliver all packets

To: xen-users@xxxxxxxxxxxxxxxxxxx
Subject: Re: [Xen-users] Bridge does not deliver all packets
From: "Jaroslaw Zdrzalek" <Jaroslaw.Zdrzalek@xxxxxxxxxxxxxxxx>
Date: Tue, 23 Jan 2007 15:01:41 +0100
Delivery-date: Wed, 24 Jan 2007 02:00:43 -0800
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
In-reply-to: <30E03F9A-38C9-4D37-9FC7-34CAC0F9136F@xxxxxxxxxxxxxxxxxx>
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References: <30E03F9A-38C9-4D37-9FC7-34CAC0F9136F@xxxxxxxxxxxxxxxxxx>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
User-agent: KMail/1.9.5
Am Dienstag 23 Januar 2007 13:30 schrieb Alexander Feder:
> Hi!
> 
> I was forced to upgrade from a perfectly working system (debian sid,  
> kernel 2.6.16-1 with xen 3.0.2) to 2.6.18 with xen 3.0.3 due to some  
> obscure reasons.
> Well, after everything was set up I realized that my domUs can no  
> longer communicate as before.
..
> 
> dom0:/etc/xen# iptables -L -vv -n
> [..snip..]
> Chain FORWARD (policy DROP 353 packets, 22270 bytes)

look here, your firewall ist dropping packets!

> pkts bytes target     prot opt in     out     source                
> destination
> 217K   24M ACCEPT     0    --  xenbr0 xenbr0  0.0.0.0/0             
> 0.0.0.0/0
>      0     0 ACCEPT     0    --  *      *       84.xx.xxx.231         
> 0.0.0.0/0           PHYSDEV match --physdev-in vif7.0
>      0     0 ACCEPT     udp  --  *      *       0.0.0.0/0             
> 0.0.0.0/0           PHYSDEV match --physdev-in vif7.0 udp spt:68 dpt:67
>      0     0 ACCEPT     0    --  *      *       84.xx.xxx.232         
> 0.0.0.0/0           PHYSDEV match --physdev-in vif10.0
>      0     0 ACCEPT     udp  --  *      *       0.0.0.0/0             
> 0.0.0.0/0           PHYSDEV match --physdev-in vif10.0 udp spt:68 dpt:67

and your rules doesnt match!

so have a look at a wiki:
http://wiki.xensource.com/xenwiki/XenNetworking#head-602e26cd4a03b992f3938fe1bea03fa0fea0ed8b

This may not answer all of your questions, but it makes thinks easer to debug.

> [..snip..]

cheers
Jaroslaw

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

<Prev in Thread] Current Thread [Next in Thread>