Displaying 1 result from an estimated 1 matches for "standingonthebrink".
2010 Jun 14
4
Promiscuous mode
...the bridge leaving the physical
# network interface peth0 only if the source IP for that packet
# matches an authorized IPv4 address for that domU.
iptables -A FORWARD -m physdev --physdev-in vif1.0 \
--physdev-out peth0 --source 216.146.46.43 -j ACCEPT
I got the above from http://www.standingonthebrink.com/index.php/ipv6-ipv4-and-arp-on-xen-for-vps/ <http://www.standingonthebrink.com/index.php/ipv6-ipv4-and-arp-on-xen-for-vps/>
Does that provide total protection? What about if traffic was going from Dom1 to Dom3, could Dom2 snoop in?
Thanks
_______________________________________________...