Xen users - Mar 2005 - Ping,arp,UDP OK, TCP not OK, help?

hello all :)
Please forgive my poor English.

I''ve setup a dom0(debian sarge) and a guest debian sarge.
I set the network-script to "network-route" and vif-script to 
"vif-route".
The dom0''s ip is 192.168.10.1 and the guest''s ip is
192.168.10.2
Ive recompiled the dom0''s kernel to support my hardware, the
guest''s
kernel is using default .config
Xen 2.0.4, 2.0.5x 2.0-testing have the same problem. 

Both can ping and arp each other, and can connect with UDP.
However TCP connections are not working in both side.

The opened TCP ports can be connected from localhost. (so the server is 
listening)
Then I do a tcpdump and netcat, here are the results:
When I connect to guest from dom0, tcpdump(on guest) shows the guest 
reveive the packet, but didn''t reply

When i connect to dom0 from guest, tcpdump(on dom0) shows the dom0 
receive the packet(seq), and send a repliy(seq/ack),
the guest''s tcpdump shows it send the packet, and receive the
dom0''s
reply, however, nothing is going on.

Finally, the error "timeout" is rised.

So, any hints, comment?
Thanks in advanced.
choy

_______________________________________________
Xen-users mailing list
Xen-users@lists.xensource.com
http://lists.xensource.com/xen-users

On Tue, at 2005-03-29 20:33, B.G. Bruce wrote:
 >: Do you have any filtering enabled on your domU.  Do an
 >: iptables-save > /tmp/foo.ipt and email the file.
 >:
 >: Thanks,
 >: B.

Thanks for the reply!
To keep things simple, I''ve just removed the iptables on my domU.
(btw) As I know, support for iptable on domU is not enabled in default 
domU''s kernel. (Please correct me if I''m wrong :)

To isolation the problem, I''ve also disable the iptables on dom0:
# iptables-save > /tmp/foo.ipt; cat /tmp/foo.ipt;

# Generated by iptables-save v1.2.11 on Tue Mar 29 20:59:06 2005
*filter
:INPUT ACCEPT [20041:5840682]
:FORWARD ACCEPT [30:1440]
:OUTPUT ACCEPT [20059:5824194]
COMMIT
# Completed on Tue Mar 29 20:59:06 2005
# Generated by iptables-save v1.2.11 on Tue Mar 29 20:59:06 2005
*nat
:PREROUTING ACCEPT [54:2875]
:POSTROUTING ACCEPT [85:4932]
:OUTPUT ACCEPT [71:4260]
COMMIT
# Completed on Tue Mar 29 20:59:06 2005

So... any comments or directions? Thanks!
Choy

_______________________________________________
Xen-users mailing list
Xen-users@lists.xensource.com
http://lists.xensource.com/xen-users