On Mon, Feb 04, 2008 at 10:19:33PM +0900, Christian Balzer wrote:
> On Mon, 4 Feb 2008 09:36:15 +0100 (CET) "Daniel Hokka Zakrisson"
> <daniel@hozac.com> wrote:
>
> > Christian Balzer wrote:
> > > On Sun, 03 Feb 2008 18:57:11 +0000 Ed W <lists@wildgooses.com> wrote:
> > >>
> > >> I *think* there is an option to set what IP address is actually used
> > >> for localhost? Forget the details, but check the docs?
> > >>
> > > lback in vserver/interfaces. ^_^
> >
> > This only applies to 2.3+.
> >
> Guess it just got ignored and things "worked" because I also made a
> 127.x.x.x interface.
>
> It is a bit frustrating when doing the RTFM dance (and I do like the
> flower page background) only to be stunted by lack of version specifics.
>
> Anyways, I searched the archives and other than this question/quest
> from 2006 (without an answer) I came up blank:
> --- Alexander Kabanov wrote:
> the only reason why I would like to have some kind of local/internal
> interface inside a guest - let people bind services to something that
> is not accessible from outside and from other guests on the host
> server.
this is true for older patches 2.2 as well as for newer
2.3.x versions which provide the complete loopback is
127.0.0.1 illusion
best,
Herbert
> ----
>
> So far I was happy with using RCF 1918 or 127/8 addresses to give
> services something to bind to that is not accessible from the evil
> outside. Now I'm trying to roll out something where the evil might
> be in Misses Jones aka the neighbor vserver.
> Anything simple/elegant that does not involve writing and maintaining
> 100 (50x2 in a HA cluster) iptables rules?
>
> Regards,
>
> Christian
> --
> Christian Balzer Network/Systems Engineer NOC
> chibi@gol.com Global OnLine Japan/Fusion Network Services
> http://www.gol.com/
Received on Mon Feb 4 22:15:17 2008