Shorewall users - Jul 2007 - Xen routed & shorewall in dom-0

I''m working through http://www.shorewall.net/XenMyWay-Routed.html to 
configure a simple (at the moment two-interface) Shorewall config - 
using Shorewall 4.0.1 & Perl compiler.

BTW, the page mentions that :
>As of this writing, the vif-route script does not set up Proxy ARP 
>correctly. So the domU can communicate with the dom0 but not with 
>hosts beyond the dom0.
If this just a matter of "echo 1 > 
/proc/sys/net/ipv4/conf/eth0/proxy_arp" ? This seems to get the basic 
networking going for me until I get Shorewall sorted.


In the example given, eth3 ($DMZ_IF) is shown as having the same 
address as eth0 but with a /32 netmask. That''s OK, and I''ve
got the
basic networking going.

However, further down the page, it shows the entry in 
/etc/shorewall/interfaces as :
>dmz     $DMZ_IF         192.168.0.255           logmartians
Is this a typo ?


I''m happy to report that I''ve now managed to get a basic
routed setup
going (just one dom-u at the moment) :-)

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/

Simon Hobson wrote:
> 
> If this just a matter of "echo 1 > 
> /proc/sys/net/ipv4/conf/eth0/proxy_arp" ? 
Yes.
> In the example given, eth3 ($DMZ_IF) is shown as having the same 
> address as eth0 but with a /32 netmask. That''s OK, and
I''ve got the
> basic networking going.
> 
> However, further down the page, it shows the entry in 
> /etc/shorewall/interfaces as :
>> dmz     $DMZ_IF         192.168.0.255           logmartians
> 
> Is this a typo ?
Yes.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key



-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/