Subject: Re: [vserver] IPtables, network namespaces
From: Tor Rune Skoglund <trs@sg.no>
Date: Wed, 21 Mar 2012 16:09:05 +0100

Den 21.03.2012 14:37, skrev Eugen Leitl:
> On Wed, Mar 21, 2012 at 10:30:22PM +0900, Christian Balzer wrote:
>> Given the functionality of net namespaces, has anybody in the past 2.5
>> years successfully used this with Vservers to set up fully functional
>> client network interface? Care to share your knowledge/experiences?
>>
>> No trace of this in util-vserver for now, AFAIK.
>
> If you want to use iptables in the guest you have to emulate the
> whole network stack which leaves you with LHC or similar.

I'm having a similar problem. Could network namespaces be used to give
a virtual server allowance to set rules on _some_ network interfaces only,
but not the whole range of network interfaces in the system?

- Tor Rune Skoglund