Re: [Xen-users] firewall domU

Grant McWilliams
2008-12-18T19:48:06Z

On Thu, Dec 18, 2008 at 8:23 AM, Maximilian W. Zeller
<mawize@gmail.com>wrote:

> We would like to implement following scenario .. please look at the png
> attachment
>
> Main Question:
> how do i set up a domU firewall/router with one interface bridged to the
> internet and interfaces connected to other domUs? do we even need an
> interface for each connected domU?
>
> thanks in advance
> merry xmas
>
> Max


Max,
   Why would you want two firewalls protecting your internal network? Anyway
it seems you''d want to do this if you keep both firewalls. Have both
DomU
firewalls connect to the standard eth0 bridge just as you have it now. Each
DomU firewall will have a second vif. Create two more bridges - br0 and br1
(name them has you like) and specify the appropriate bridge in the www DomUs
and email DomUs config files. You''ll also need to specify that the
second
interfaces on the DomU firewalls reside on the appropriate bridges.


Grant McWilliams

Some people, when confronted with a problem, think "I know, I''ll
use
Windows."
Now they have two problems.