xen-users

[Top] [All Lists]

[Xen-users] iptables problem

from [Ivan Lisenkov]

[Permanent Link][Original]

To:	xen-users@xxxxxxxxxxxxxxxxxxx
Subject:	[Xen-users] iptables problem
From:	Ivan Lisenkov <ivan@xxxxxxxxx>
Date:	Tue, 13 Oct 2009 14:31:52 +0400
Delivery-date:	Tue, 13 Oct 2009 03:33:00 -0700
Envelope-to:	www-data@xxxxxxxxxxxxxxxxxxx
List-help:	<mailto:xen-users-request@lists.xensource.com?subject=help>
List-id:	Xen user discussion <xen-users.lists.xensource.com>
List-post:	<mailto:xen-users@lists.xensource.com>
List-subscribe:	<http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe:	<http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
Sender:	xen-users-bounces@xxxxxxxxxxxxxxxxxxx

Dear xen users,

I am using xen 3.3.1 on opensuse 11.1. After creating a domU with 2 nics two iptables rules are created by default:

-A FORWARD -s XX.XX.XX.24/32 -m physdev --physdev-in vif77.0 -j ACCEPT
-A FORWARD -p udp -m physdev --physdev-in vif77.0 -m udp --sport 68 --dport 67 -j ACCEPT
-A FORWARD -s XX.XX.XX.25/32 -m physdev --physdev-in vif77.1 -j ACCEPT
-A FORWARD -p udp -m physdev --physdev-in vif77.1 -m udp --sport 68 --dport 67 -j ACCEPT

The rules seems logical, but one of them does no work! I can't ping XX.XX.XX.24 from outside. But if I change the rule manulally to:

-A FORWARD -s 188.40.226.24/32 -m physdev --physdev-in vif77.1 -j ACCEPT

everything works. This seems unlogical, because first ip is bounded to second nic, but works. The problem is that I have to change the rules every I reboot domu.

Any ideas how to fix it?

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

[More with this subject...]

<Prev in Thread]	Current Thread	[Next in Thread>
[Xen-users] iptables problem, Ivan Lisenkov <= Re: [Xen-users] iptables problem, Sergey Smirnov RE: [Xen-users] iptables problem, Dustin Henning

Previous by Date:	Re: [Xen-users] moving virtual machines from one computer to another, David J Craigon
Next by Date:	[Xen-users] i have question about domain-U's full virtual install, ch huang
Previous by Thread:	[Xen-users] Xen on archlinux, Siju George
Next by Thread:	Re: [Xen-users] iptables problem, Sergey Smirnov
Indexes:	[Date] [Thread] [Top] [All Lists]