Re: [vserver] iptables on guest

From: <dzenan.causevic_at_wise-t.com>
Date: Thu 19 Nov 2009 - 18:09:38 GMT
Message-ID: <9d0e197b2363b0ce5cb68fb11e44a010.squirrel@wise-t.net>

> John Alberts wrote:
>> You can't run iptables on any of the guests only on the host. Just
>> specify the IP of the guest in the destination of the rule.
>>
>> Regards,
>> John
>>
>>
>> On Thu, Nov 19, 2009 at 11:07 AM, <dzenan.causevic@wise-t.com> wrote:
>>
>>> I have iptables on my host, but I installed iptables on guest as well
>>> (having two firewall levels won't hurt). However I couldn't find
>>> /etc/sysconfig/iptables file so I copied one from my host.
>>> Now when I try to start iptables I get following error:
>>>
>>> bash-3.2# service iptables start
>>> Applying iptables firewall rules: iptables-restore v1.3.5:
>>> iptables-restore: unable to initializetable 'filter'
>>>
>>> Error occurred at line: 3
>>> Try `iptables-restore -h' or 'iptables-restore --help' for more
>>> information.
>>> [FAILED]
>>>
>>> If I try to run iptables-restore it hangs forever. Is it allowed to run
>>> iptables both on host and guest?
>>>
>>> Dzenan
>>>
> Yeah, but you can parse a tiny script on the host per client.
> Or request the host to add/remove/rules related to the client.

That's what I am gonna do. I don't really need two firewalls but I was
curious if that's possible. Adding a rule on the host with guest
destination IP is just fine in that case

Thanks guys a lot,
Dzenan

>
> vs-tools (https://listes.univ-reims.fr/sympa/d_read/vs-tools), has an
> implementation of the first thing :-)
>
> Regards,
>
> --
> Mathieu Goessens
> IT consultant.
>
> gebura@poolp.org
> + 33 6 07 91 54 87
> http://gebura.eu.org
>
>
Received on Thu Nov 19 16:09:55 2009

[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Thu 19 Nov 2009 - 16:09:57 GMT by hypermail 2.1.8