PDA

View Full Version : Xen 3.2 dom0 firewalling


bendix
10th July 2008, 16:34
In "Installing Xen On An Ubuntu 8.04 (Hardy Heron) Server From The Ubuntu Repositories" Falko Timme describes how to setup the new Xen 3.2 on an Ubuntu server.

Since in Xen 3.2 the bridge xenbr0 does no longer exist (in fact the bridge is now named eth0), my old fwbuilder based iptables scripts from debian etch will no longer work. By firewalling eth0 you also cut all the connections to the domU.

I found this a great disadvantage compared to xen 3.0x where dom0 and domU machines all could have there own iptables scripts.

I searched google but only found some vage hints to setup the bridge on OS level and then make a custom xen scripts on that brige.

Does anyone have experience with iptables on the xen bridge eth0? Maybe an extension to Falko's nice guide?

falko
11th July 2008, 14:33
Haven't tried this, so I can't say much about it... :(