Re: [Vserver] Protecting guests' interfaces

From: Teemu Matilainen <teemu.matilainen_at_ri.fi>
Date: Thu 06 Jul 2006 - 12:43:16 BST
Message-ID: <20060706114316.GA30835@ri.fi>

Hi,

On Wed, 05 Jul 2006, Baltasar Cevc wrote:

> >Is there any way to restrict a guest from accessing some
> >interfaces or services of other guests?
> The guest can only actively use the interfaces assigned to it (see the
> "great flower page", /etc/vservers/<vserver-name>/interfaces about
> that), however, it can connect to other guests' interfaces. So if you
> talk about blocking network connections between the hosts, that would
> be a firewall thing, you'd have to set up iptables to get there.

Yes, I know. But I have not succeeded to restrict access by iptables,
neither. It seems that no iptables rules are used when the IP packets
are delivered inside the host. At least inside one device. Or do I
have a bug in my rules?

Cheers,
        - Teemu

_______________________________________________
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
Received on Thu Jul 6 14:51:15 2006

[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Thu 06 Jul 2006 - 14:51:19 BST by hypermail 2.1.8