Re: [Vserver] firewall between 2 vservers

From: Oliver Welter <mail_at_oliwel.de>
Date: Sun 07 Jan 2007 - 18:44:56 GMT
Message-ID: <45A13FA8.5010009@oliwel.de>

Hi Oliver,

> i'm trying to restrict access from one vserver to another vserver
> running on the same machine. one is running on dummy0, the other one on
> dummy1. i tried firehol and shorewall, but it just doesn't work. it
> seems that all firewall rules are just ignored. what's so special with
> the vserver networking? has anyone examples how to setup working
> iptables rules that prevents access from one vserver to another?

AFAIK it is not possible to restrict networking betwwen two guests as
the pakets are switched directly on the shared interface and do not pass
the iptables queues. There is a new network stack popping up at the
horizon ("network-ng") but its not usable at the moment.

Oliver

_______________________________________________
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver

Received on Sun Jan 7 19:32:30 2007
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Sun 07 Jan 2007 - 19:32:35 GMT by hypermail 2.1.8