Xen 
 
Home About Xen.org Xen Xen Summit Wiki Mailing List Bug Tracker Xen Downloads
 
   
 

xen-users

Re: [Xen-users] Firewall in a guest domain?

To: xen-users@xxxxxxxxxxxxxxxxxxx
Subject: Re: [Xen-users] Firewall in a guest domain?
From: Mark Williamson <mark.williamson@xxxxxxxxxxxx>
Date: Tue, 19 Jul 2005 18:17:37 +0100
Cc: Chris de Vidal <Chris@xxxxxxxxxx>
Delivery-date: Tue, 19 Jul 2005 17:14:20 +0000
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
In-reply-to: <15907.63.95.64.254.1121792062.squirrel@xxxxxxxxxxxx>
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
Organization: University of Cambridge
References: <15907.63.95.64.254.1121792062.squirrel@xxxxxxxxxxxx>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
User-agent: KMail/1.8
> Any tips on running a firewall inside a guest domain to protect all other
> domains?

Just use IPTables, as if it were a normal machine.

> Or should I run it on domain0?

You can do that too.  You can also use IPTables, EBTables, etc to restrict 
what the guests can do.

> Or should I run it externally?

If you want ;-)  You don't have to, though.

Cheers,
Mark

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users