> John Alberts wrote:
>> You can't run iptables on any of the guests only on the host. Just
>> specify the IP of the guest in the destination of the rule.
>> On Thu, Nov 19, 2009 at 11:07 AM, <firstname.lastname@example.org> wrote:
>>> I have iptables on my host, but I installed iptables on guest as well
>>> (having two firewall levels won't hurt). However I couldn't find
>>> /etc/sysconfig/iptables file so I copied one from my host.
>>> Now when I try to start iptables I get following error:
>>> bash-3.2# service iptables start
>>> Applying iptables firewall rules: iptables-restore v1.3.5:
>>> iptables-restore: unable to initializetable 'filter'
>>> Error occurred at line: 3
>>> Try `iptables-restore -h' or 'iptables-restore --help' for more
>>> If I try to run iptables-restore it hangs forever. Is it allowed to run
>>> iptables both on host and guest?
> Yeah, but you can parse a tiny script on the host per client.
> Or request the host to add/remove/rules related to the client.
That's what I am gonna do. I don't really need two firewalls but I was
curious if that's possible. Adding a rule on the host with guest
destination IP is just fine in that case
Thanks guys a lot,
> vs-tools (https://listes.univ-reims.fr/sympa/d_read/vs-tools), has an
> implementation of the first thing :-)
> Mathieu Goessens
> IT consultant.
> + 33 6 07 91 54 87
Received on Thu Nov 19 16:09:55 2009