[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Xen-users] xen 3.2 with bridge, domU cannot connect to the internet



think i posted in the wrong ml the first time, sorry, reposting here

hi, i recently updated to xen 3.2 and now networking has stopped working.
i have a configuration with 2 nics: eth1 (internet) and eth0 (lan)
when i start xen i get peth0,peth1 with no ip, and bridge eth0,eth1 with the
right addresses
the server running xen is also the lan gw

the routing table seems ok
192.168.0.0    *                   255.255.255.0    U     0     0        0 eth0
1.232.xx.0      *                   255.255.240.0    U     0     0        0 eth1
default            1.232.xx.1    0.0.0.0                UG   0     0        0 
eth1

connections coming from the lan are all ok and the nat works well, but
the ones coming from the domUs cannot transmit any data.
the domUs are on the same subnet of dom0 (192.168.0.0/24), gw and ns are ok
i use iptables with MASQUERADE for nat and tried the NOTRACK solution
but it's not working for me
from domUs i can ping the outside if i use an ip as parameter for ping,
and when dumping traffic on dom0 i see some ACKs ..looks like the
connection is established, but no data comes back

# telnet 66.249.93.104 80
Trying 66.249.93.104...
Connected to 66.249.93.104.
Escape character is '^]'.
get index.php
-- after like 10 seconds --
Connection closed by foreign host.

i get connected but i receive no data, in traffic dump i can see the
packet containing "get index.php" going out and then the connection goes
timeout

the firewall is completely empty and in ACCEPT, the only rules i used
are MASQUERADE for nat and NOTRACK in raw table

has anyone found a solution with xen 3.2?
thanks in advance for help


_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users


 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.