About this list Date view Thread view Subject view Author view Attachment view

From: Jacques Gelinas (jack_at_solucorp.qc.ca)
Date: Mon 25 Feb 2002 - 22:19:20 GMT


On Wed, 20 Feb 2002 23:58:59 -0500, lance wrote
> On Wed, 20 Feb 2002, Jacques Gelinas wrote:

> Aha thanks for clearing that up - have you thoughts on how to segregate
> firewalling between the different vservers ??
>
> Could it be done with a per instance chain (or table) that the vserver can
> modify ??

This is tricky, but something may be done using an extension to the rebootmgr
service (maybe). The idea would be for the vserver to supply to the root
server some partial rules (what it accepts, what it denies and so on). The rules
would be completed (using the vserver IP number) and the firewall would
be regenerated.

---------------------------------------------------------
Jacques Gelinas <jack_at_solucorp.qc.ca>
vserver: run general purpose virtual servers on one box, full speed!
http://www.solucorp.qc.ca/miscprj/s_context.hc


About this list Date view Thread view Subject view Author view Attachment view
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Wed 06 Nov 2002 - 07:03:39 GMT by hypermail 2.1.3