The Perfect Xen 3.0 Setup For Debian - virtual network problem

[rsacon]

I followed the tutorial step by step on a box I just rented at an ISP. Everything went fine (including network connecticity) until I reached the last part with the virtual local network.

The VMs can reach each others and reach the Internet form their 10.0.0.x network, But after putting in the NAT rules I still can't aceess any running service such as SSH from the Internet. Is there any step misssing in the tutorial or am I doing something wrong ? And there is a difference when I add the NAT rules. Without them I get immediately a connection refused error, with the NAT rules it just keeps hanging.

For now, I went back to the bridged connection, but I relly hope to get the private local network running.

thanks in advance for any advice

[falko]

Can you post the NAT rules you're using?

[rsacon]

These were my NAT settings:


more /etc/network/if-up.d/iptables:

#!/bin/sh

### Port Forwarding ###
iptables -A PREROUTING -t nat -p tcp -i eth0 --dport 80 -j DNAT --to 10.0.0.2:80
iptables -A PREROUTING -t nat -p tcp -i eth0 --dport 6678 -j DNAT --to 10.0.0.1:22
iptables -A PREROUTING -t nat -p tcp -i eth0 --dport 6679 -j DNAT --to 10.0.0.2:22

[falko]

Did you

chmod 755 /etc/network/if-up.d/iptables

(so that the file is executed at system startup)? Is eth0 your network device on dom0?

[rsacon]

yes to both of your questions, see below. I still couldn't figure out why it doesen't work. Any ideas how to troubleshoot this problem ?

debian:/home/saccon# ls -la /etc/network/if-up.d/iptables
-rwxr-xr-x 1 root root 282 2006-04-13 17:28 /etc/network/if-up.d/iptables

debian:/home/saccon# ifconfig
eth0 Link encap:Ethernet HWaddr 00:16:35:78:EF:C0
inet addr:72.232.68.66 Bcast:72.255.255.255 Mask:255.255.255.248
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:915 errors:0 dropped:0 overruns:0 frame:0
TX packets:758 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:87754 (85.6 KiB) TX bytes:165024 (161.1 KiB)
Interrupt:17

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)

vif5.0 Link encap:Ethernet HWaddr FE:FF:FF:FF:FF:FF
inet addr:10.0.0.128 Bcast:0.0.0.0 Mask:255.255.255.255
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:35 errors:0 dropped:0 overruns:0 frame:0
TX packets:24 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:2406 (2.3 KiB) TX bytes:1394 (1.3 KiB)

vif6.0 Link encap:Ethernet HWaddr FE:FF:FF:FF:FF:FF
inet addr:10.0.0.129 Bcast:0.0.0.0 Mask:255.255.255.255
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:22 errors:0 dropped:0 overruns:0 frame:0
TX packets:5 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:1570 (1.5 KiB) TX bytes:248 (248.0 b)


regards
Roberto

[falko]

What happens if you execute /etc/network/if-up.d/iptables? Run

/etc/network/if-up.d/iptables

on the shell as root.

Please make sure that file has Unix linebreaks, not Windows linebreaks.