[Xen-users] SNAT XENBR0

[srawilliams <sean@xxxxxx>]

Hi,

I have a ubuntu 12.04 Xen host with a bridge network

----------
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
allow-hotplug eth0
iface eth0 inet manual

auto xenbr0
iface xenbr0 inet static
        bridge_ports eth0
        address 172.29.213.104
        netmask 255.255.255.128
        gateway 172.29.213.1
        dns-nameservers 8.8.8.8
------

Because of firewall restrictions i have to SNAT or masquerade to the host,
which i do on the xenbr0 bridge.

iptables -t nat -A POSTROUTING -o xenbr0 -j MASQUERADE

I also have ipforwarding set on the host

net.ipv4.ip_forward = 1
net.ipv4.conf.eth0.proxy_arp = 1

This works fine.  My guests can see the world, however everything routed to
the guests from the world gets the ip address of Xenbr0.  I am presuming
because requests in to those guest go via xenbr0 which changes the source on
the way to the guest.   

I have tied taking off the postrouting form xenbr0 and tried both SNAT and
MASQUERADE on eth0 but this does not work.

Please help.  I don't have enough knowledge to figure out a solution.

Cheers

Sean









--
View this message in context: 
http://xen.1045712.n5.nabble.com/SNAT-XENBR0-tp5717008.html
Sent from the Xen - User mailing list archive at Nabble.com.

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxx
http://lists.xen.org/xen-users