Re: [Xen-users] iptables and state matches (established, related)

[Marc Patino Gómez <mpatino@xxxxxxxxxxxx>]

I have the same problem, and also

echo "0" >/proc/sys/net/bridge/bridge-nf-call-iptables

solves it. I don't known the reason, so I will read some doc about it.
Thanks John !!


John Hannfield wrote:
> This is a known problem with Xen 3.0.x  and iptables connection tracking.
> Connection tracking and state filtering only works as long as xen is
> not running.
> Try doing this:
>
> echo "0" >/proc/sys/net/bridge/bridge-nf-call-iptables
>
> That fixed it for me.
_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users