Subject: Re: [vserver] iptables on guest
From: Mathieu Goessens <gebura@poolp.org>
Date: Thu, 19 Nov 2009 16:22:31 +0100

John Alberts wrote:
> You can't run iptables on any of the guests only on the host.  Just
> specify the IP of the guest in the destination of the rule.
>
> Regards,
> John
>
>
> On Thu, Nov 19, 2009 at 11:07 AM,  <dzenan.causevic@wise-t.com> wrote:
>   
>> I have iptables on my host, but I installed iptables on guest as well
>> (having two firewall levels won't hurt). However I couldn't find
>> /etc/sysconfig/iptables file so I copied one from my host.
>> Now when I try to start iptables I get following error:
>>
>> bash-3.2# service iptables start
>> Applying iptables firewall rules: iptables-restore v1.3.5:
>> iptables-restore: unable to initializetable 'filter'
>>
>> Error occurred at line: 3
>> Try `iptables-restore -h' or 'iptables-restore --help' for more information.
>>                                                           [FAILED]
>>
>> If I try to run iptables-restore it hangs forever. Is it allowed to run
>> iptables both on host and guest?
>>
>> Dzenan
>>     
Yeah, but you can parse a tiny script on the host per client.
Or request the host to add/remove/rules related to the client.

vs-tools (https://listes.univ-reims.fr/sympa/d_read/vs-tools), has an 
implementation of the first thing :-)

Regards,

-- 
Mathieu Goessens
IT consultant.
 
gebura@poolp.org
+ 33 6 07 91 54 87
http://gebura.eu.org