[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Xen-devel] iptables not working with XEN2.0 on Fedora Core 3


  • To: xen-devel@xxxxxxxxxxxxxxxxxxxxx
  • From: Rick <judicator3@xxxxxxxxx>
  • Date: Thu, 13 Jan 2005 13:44:13 -0500
  • Delivery-date: Thu, 13 Jan 2005 18:53:00 +0000
  • Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:mime-version:content-type:content-transfer-encoding; b=We6bxN0bBoURDq2tZhA8xA+9hiazi6t4BhaQgG1E+uGZrH1+Vn8wYVN82Er4O7g4aCIR++gKJazXnXEi8yuA1H60O0+ACyJh+wwDovoZxAfz4dTBpksyWQRmyIynYqg2a3rWPjMFMKJ25PS8F9sM7U+TkVK+719lKZ+XTlo7/E4=
  • List-id: List for Xen developers <xen-devel.lists.sourceforge.net>

Hello,

I have just installed XEN2.0 on a fresh installation of Fedora Core 3
and iptables does not work properly
=====================================================================
[root@aquarius ~]# /etc/init.d/iptables start
Applying iptables firewall rules: iptables-restore v1.2.11: iptables-restore:
unable to initialize table 'filter'

Error occurred at line: 3
Try `iptables-restore -h' or 'iptables-restore --help' for more information.
                                                          [FAILED]
=====================================================================

=====================================================================
[root@aquarius ~]# iptables -L
iptables v1.2.11: can't initialize iptables table `filter': Table does
not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
=====================================================================

I have just installed xen2.0 on a fresh fedora core 3 installation and my
iptables rules are those that were created by fedora core 3 installation:
==================================================
# Firewall configuration written by system-config-securitylevel
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:RH-Firewall-1-INPUT - [0:0]
-A INPUT -j RH-Firewall-1-INPUT
-A FORWARD -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT
-A RH-Firewall-1-INPUT -p 50 -j ACCEPT
-A RH-Firewall-1-INPUT -p 51 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp --dport 5353 -d 224.0.0.251 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT
===================================================

I have compiled vmlinuz-2.6.10-xen0 using the .config file that came
with XEN2.0 source. Do I need to modify the .config file to include
some extra modules ?

Thanks
Rick


-------------------------------------------------------
The SF.Net email is sponsored by: Beat the post-holiday blues
Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek.
It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt
_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/xen-devel


 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.