Subject: Re: [vserver] iptables rules for lo interface in guest
From: Michael <michael.auckland@gmail.com>
Date: Wed, 30 Sep 2009 09:46:53 +1300

>> when migrated to virtual server use rules on host to redirect port:
>> -A PREROUTING -d $EXTIP/32 -i eth0 -p tcp -m tcp --dport 5631 -j DNAT
>> --to-destination $GEUSTIP:5666
>
> you are now trying to DNAT? an outgoing (routed)
>request to a different port on a potential local?
>IP ... doesn't really make sense to me ...
since many guests running and rules needed only for 1guest.

>> which working OK for any outside access but not for localhost in guest.
>> so I am a bit confuse how properly apply iptabels on host so it will
>> work for lo in guest?
>
> I doubt, remapping affected the 'localhost' in
> your Xen setup ....

there are no more xen installed :) only vserver

I'm trying to redirect all request (internal for guest-localhost and
external) for port 5631 to port 5666 for guest_no_1 and not for any
others.

-- 
--
Michael