On Mon, Feb 04, 2008 at 10:19:33PM +0900, Christian Balzer wrote: > On Mon, 4 Feb 2008 09:36:15 +0100 (CET) "Daniel Hokka Zakrisson" > <daniel@hozac.com> wrote: > > > Christian Balzer wrote: > > > On Sun, 03 Feb 2008 18:57:11 +0000 Ed W <lists@wildgooses.com> wrote: > > >> > > >> I *think* there is an option to set what IP address is actually used > > >> for localhost? Forget the details, but check the docs? > > >> > > > lback in vserver/interfaces. ^_^ > > > > This only applies to 2.3+. > > > Guess it just got ignored and things "worked" because I also made a > 127.x.x.x interface. > > It is a bit frustrating when doing the RTFM dance (and I do like the > flower page background) only to be stunted by lack of version specifics. > > Anyways, I searched the archives and other than this question/quest > from 2006 (without an answer) I came up blank: > --- Alexander Kabanov wrote: > the only reason why I would like to have some kind of local/internal > interface inside a guest - let people bind services to something that > is not accessible from outside and from other guests on the host > server. this is true for older patches 2.2 as well as for newer 2.3.x versions which provide the complete loopback is 127.0.0.1 illusion best, Herbert > ---- > > So far I was happy with using RCF 1918 or 127/8 addresses to give > services something to bind to that is not accessible from the evil > outside. Now I'm trying to roll out something where the evil might > be in Misses Jones aka the neighbor vserver. > Anything simple/elegant that does not involve writing and maintaining > 100 (50x2 in a HA cluster) iptables rules? > > Regards, > > Christian > -- > Christian Balzer Network/Systems Engineer NOC > chibi@gol.com Global OnLine Japan/Fusion Network Services > http://www.gol.com/