similar to: Xen 3: Untethered bridges??

I''m converting my network from a "one interface per segment" to a "single connection with vlans", well, some hardware I have requires using different vlan IDs. suffice it to say I need bridges to connect a few different vlans that should all be one but can''t be because of firmware constraints. so my first step is to get shorewall to know about bridges.

hi all, i have this situation: isp1 | dmz ----- FW linux ----- isp2 |----------------------------------- vpn concentrator ----- various ipsec lan-2-lan | LAN In lan i have "pc zone" and "server zone", same network. Dmz and server zone browse internet through isp1, lan use isp2, and remote

Hi all I have a problem splitting traffic behind 2 adsl. My situation: _________router2 | lan1 ------- fw ----------- router1 | lan2----------| lan1 use router1, lan2 router2. The linux default gw is set to router2, lan2 browse internet without any problem (icmp, tcp..). Lan1 is blocked. >From lan1 i can ping router1, and i''ve set

Tom, I use shorewall 2.2.3 with four network interfaces comprising of three zones. I am able to ping some servers from the internet(net-zone) and not others. I do not want to allow ping by default from internet. I have not copied the files action.drop and action.reject into /etc/shorewall. Nor I have a AllowPing rule in rules file. The policy file is pasted below. #SOURCE DEST POLICY

Hello... Im trying to setup HTB to allow me to shape traffic from two upstreams that meets on single lan0 interface. I prefer to use HTB qdisc within HTB root qdisc for cleaner rules design. Seems that it doesnt work at all. tc -s class show doesnt show any traffic on other classes attached to HTB qdisc. Linux 2.6.20.7 iproute-2.6.20-070313 Weird thing is that tc -s class show that 1: and 2:

Hello all, I''m somewhat new to networking, and I''m having trouble masquerading connections that are coming over a bridge. The bridge only has a single port for now, but I''m going to add more ports later. I''m basing my configuration on the two-interface quick start guide. I''m using Shorewall 3.0.4 on Ubuntu Dapper. My network looks like this: * The

Hello to everyone, Here is the situation: [LAN1]---[eth3]/----------\ | LinuxBR |[eth2]---[LAN0]---[linuxGW]---[internet] [LAN2]---[eth4]\----------/ Whole LAN is in subnet 10.0.0.0/24. So I need: LAN0, LAN1, LAN2 could not see each other. LAN0, LAN1, LAN2 is in same subnet (10.0.0.0/24). All LANs have to get only internet. How can I configure LinuxBR to do so?

Hello, Where can I find a link (or docs) to *working* network config for xen 4.1.2? My tests (s. below) were not successful. Thank you in advance for any hints. Regards, Mark # --- root@xen411dom0:~# cat /etc/network/interfaces # Used by ifup(8) and ifdown(8). See the interfaces(5) manpage or # /usr/share/doc/ifupdown/examples for more information. auto lo iface lo inet loopback auto bond0

Hi list, I encounter a problem again, which I thought resolved : when joining a domain, sometimes the workstation says it cannot join, or the domain does not exist, or something like that, because there is a DNS resolution probleme. I read the Micro$oft documentation listed in the error message (http://www.microsoft.com/windows2000/dns/tshoot/dns_tshoot2A.asp) I solved the problem, the

Set guest selectors to be null if it''s not valid when switch to protected-mode in the guest firmware. Signed-off-by: Chengyuan Li <chengyuan.li@intel.com> Signed-off-by: Asit Mallick <asit.k.mallick@intel.com> Thanks, Chengyuan _______________________________________________ Xen-devel mailing list Xen-devel@lists.xensource.com http://lists.xensource.com/xen-devel

I''ve got 2.0.7 running on a machine with 1 physical interface and two bridges, like so -- bridge name bridge id STP enabled interfaces xen-br0 8000.0040f4ce392f no eth1 vif5.0 vif9.0 xenbr1 8000.feffffffffff no

I would like to add a rule allowing only the address 192.168.150.20 and the range of addresses from 192.169.150.100 to 192.168.150.150 in zone dmz0 to connect to two terminal servers in the local zone. Is there a syntax that can specify a range of addresses in the rules file? Do I have to enter each one separately? -- Stephen Carville Unix and Network Adminstrator DPSI 6033 W.Century Blvd.

Hi, Sorry of this is the wrong list, trying to find some help. I am trying to set up 2 KVM hosts using Debian 9 (connecting to a 3 node Centos 7.4 gluster cluster) To get the bandwidth I have bonded 2 NICS each end. However while the network works fine for the Debian VM host the VM guests cannot connect/get an IP using DHCP connecting to br0. (Same setup on the Centos end works fine however)

Thanks for this answer. As I understood, for example if parameter bind interfaces only = yes is and interfaces = lan0 (192.168.0.254) is and if broadcast packet goes from 95.95.95.14 such packet will be dropped (in other words) ? Am I right ? And other thing. Why is 192.168.0.255 (network broadcast) opened for ? May be exact such address (network broadcast) is inbtended for receiving broadcasts

Hello Folks, I am looking for official centos 6 x86_64 AMI's for the Singapore region. I found an ebs backed Centos image from http://wiki.centos.org/Cloud/AWS (ami-3e22616c) in the market place <https://aws.amazon.com/marketplace/ordering/ref=dtl_psb_continue?ie=UTF8&pr oductId=adc4348e-1dc3-41df-b833-e86ba57a33d6&region=ap-southeast-1> . However I am unable to find

Hmmm, I founded some at https://lists.samba.org/archive/samba-technical/2012-July/085752.html As I saw these patches was already implemented. But is it possible to receive broadcast not to 0.0.0.0 but to x.y.z.255 ? This is network broadcast either. And opened 0.0.0.0 even with checking of source net is quite insecure from net security point of view. I think so. May be is it necessary to add

I have founded that 0.0.0.0:port could be "closed" by setting up socket address = wishing IP addresses, for example socket address = 127.0.0.1 192.168.0.254 2015-01-11 17:46 GMT+03:00 CpServiceSPb . <cpservicespb at gmail.com>: > Thanks for this answer. > As I understood, for example if parameter > bind interfaces only = yes is and > interfaces = lan0 (192.168.0.254)

Hi, we''re running 4 xen servers on our network with multiple network cards. During HighLoad we experince degeneration of inbound network traffic through our loadbalancer. I might found a reason for it, in Dom0 dmesg output looks as follows: [1157421.975910] eth0: received packet with own address as source address [1157421.975957] eth0: received packet with own address as source

https://bugzilla.netfilter.org/show_bug.cgi?id=1262 Bug ID: 1262 Summary: nft insert rule ignores space in prefix value Product: nftables Version: unspecified Hardware: x86_64 OS: Gentoo Status: NEW Severity: enhancement Priority: P5 Component: nft Assignee: pablo at

On Wed, 23 Sep 2020 at 23:39, Orion Poplawski <orion at nwra.com> wrote: > On 9/23/20 7:07 AM, Stephen John Smoogen wrote: > > On Wed, 23 Sep 2020 at 04:33, Carlos Lopez <clopmz at outlook.com> wrote: > > > >> Hi all, > >> > >> > >> With SystemD, how can I make certain service dependent on certain > network > >> interfaces