WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

Re: [Xen-users] IP blocking

To: shacky <shacky83@xxxxxxxxx>
Subject: Re: [Xen-users] IP blocking
From: mail4dla@xxxxxxxxxxxxxx
Date: Mon, 6 Aug 2007 14:53:36 +0200
Cc: xen-users@xxxxxxxxxxxxxxxxxxx
Delivery-date: Mon, 06 Aug 2007 05:51:18 -0700
Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=googlemail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references; b=ZYlg8s7lColVd0uvZXPTfyQcxXvasaRILCpgOjymPdCASIHH55p3mn3VBlZBz9psRLOnESmpt2mJOWnWnA5woUdtArlRO7ZkenK/j5WA1ISZ0Q66xz/1VS7fs9VhBcTQPpzAkvf7SHCGheOTUg9UqVrkCMaGECu813e/ey19kOM=
Domainkey-signature: a=rsa-sha1; c=nofws; d=googlemail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references; b=hJnxddTE1HYWM1p969yu7kCvW8btcjsqlgoA2DxISgn48PVm8KVR0YCM5bGe0SiOioKGyBvk29WKGQjB6jEgO1FpnooRyonFWrp3OXCAfttmIGBB+h4wqGFbbt33cwKO6TfEOpeamYHeKm7lKa8vFKUW+fiQRJ5/HP9p1fon+no=
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
In-reply-to: <7fedbc910708060518s510357cdx7e3be43159616815@xxxxxxxxxxxxxx>
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References: <7fedbc910708060518s510357cdx7e3be43159616815@xxxxxxxxxxxxxx>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
Hi,

I suggest you stop to bridge the DomUs directly to the network.
Then, you can use standard Linux mechanisms in routing and filtering. You can even use point-to-point networking as discussed earlier on this list.
iptables should also be able to do this on bridge level, but I would not consider this a clean approach.

Cheers
dla

On 8/6/07, shacky < shacky83@xxxxxxxxx> wrote:
Hi.

How I can assing a given IP address to a given domU and force the user
of that domU to use that IP address and not all other?
I don't want the user to change the IP address of his virtual machine
in /etc/network/interfaces with one ore more IP addresses which are
not assigned to him.
In addition I don't want the user to create more virtual interface
(eth0:x) than he is allowed to use (I allow each domU to have only two
IP addresses).

Could you explain me this, please?

Thank you very much!

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users
<Prev in Thread] Current Thread [Next in Thread>