Subject: Routing problem in Debian
From: Olivier BATARD <obatard@gmail.com>
Date: Tue, 12 Jan 2010 16:11:17 +0100
Tue, 12 Jan 2010 16:11:17 +0100
Hello,

We're trying to build a vserver infrastructure on Debian Lenny with
following parameter :

OS :

 - One host with the kernel 2.6.26 / Debian lenny with the debian tools
 - 3 guests, each one runs on a logical volume in reiserfs

Network :

- 2 Vlan, one for the the lan, one for the dmz
- some guests's ip are one the dmz, some on the lan
- on the hosts we have an /etc/interface with two interfaces with bonding
(balance-rr mode)
- Vlan have been set up in the network configuration, each guest interfaces
as bond0.vlan as device.


Here's my problem,

On a dmz guest, when I run a ip route show, I see the routes of the host, so
a route to the lan ... which is not good for security ...

What is the best solution to isolate the guest and controlling routing ? . I
googled it and I found some answers by using ip route with alternate
table ... Is it the best and easiest solution now ? How can I set up that
correctly in Debian ?

Thanks by advance ...


Hello,
 
We're trying to build a vserver infrastructure on Debian Lenny with following parameter :
 
OS :
 
 - One host with the kernel 2.6.26 / Debian lenny with the debian tools
 - 3 guests, each one runs on a logical volume in reiserfs
 
Network :
 
- 2 Vlan, one for the the lan, one for the dmz
- some guests's ip are one the dmz, some on the lan
- on the hosts we have an /etc/interface with two interfaces with bonding (balance-rr mode)
- Vlan have been set up in the network configuration, each guest interfaces as bond0.vlan as device.
 
 
Here's my problem,
 
On a dmz guest, when I run a ip route show, I see the routes of the host, so a route to the lan ... which is not good for security ...
 
What is the best solution to isolate the guest and controlling routing ? . I googled it and I found some answers by using ip route with alternate table ... Is it the best and easiest solution now ? How can I set up that correctly in Debian ?
 
Thanks by advance ...