Re: [vserver] iptables on guest

John Alberts wrote:
> You can't run iptables on any of the guests only on the host. Just
> specify the IP of the guest in the destination of the rule.
>
> Regards,
> John
>
>
> On Thu, Nov 19, 2009 at 11:07 AM, <dzenan.causevic@wise-t.com> wrote:
>
>> I have iptables on my host, but I installed iptables on guest as well
>> (having two firewall levels won't hurt). However I couldn't find
>> /etc/sysconfig/iptables file so I copied one from my host.
>> Now when I try to start iptables I get following error:
>>
>> bash-3.2# service iptables start
>> Applying iptables firewall rules: iptables-restore v1.3.5:
>> iptables-restore: unable to initializetable 'filter'
>>
>> Error occurred at line: 3
>> Try `iptables-restore -h' or 'iptables-restore --help' for more information.
>> [FAILED]
>>
>> If I try to run iptables-restore it hangs forever. Is it allowed to run
>> iptables both on host and guest?
>>
>> Dzenan
>>
Yeah, but you can parse a tiny script on the host per client.
Or request the host to add/remove/rules related to the client.

vs-tools (https://listes.univ-reims.fr/sympa/d_read/vs-tools), has an
implementation of the first thing :-)

Regards,

-- 
Mathieu Goessens
IT consultant.
 
gebura@poolp.org
+ 33 6 07 91 54 87
http://gebura.eu.org