> John Alberts wrote: >> You can't run iptables on any of the guests only on the host. Just >> specify the IP of the guest in the destination of the rule. >> >> Regards, >> John >> >> >> On Thu, Nov 19, 2009 at 11:07 AM, <dzenan.causevic@wise-t.com> wrote: >> >>> I have iptables on my host, but I installed iptables on guest as well >>> (having two firewall levels won't hurt). However I couldn't find >>> /etc/sysconfig/iptables file so I copied one from my host. >>> Now when I try to start iptables I get following error: >>> >>> bash-3.2# service iptables start >>> Applying iptables firewall rules: iptables-restore v1.3.5: >>> iptables-restore: unable to initializetable 'filter' >>> >>> Error occurred at line: 3 >>> Try `iptables-restore -h' or 'iptables-restore --help' for more >>> information. >>> [FAILED] >>> >>> If I try to run iptables-restore it hangs forever. Is it allowed to run >>> iptables both on host and guest? >>> >>> Dzenan >>> > Yeah, but you can parse a tiny script on the host per client. > Or request the host to add/remove/rules related to the client. That's what I am gonna do. I don't really need two firewalls but I was curious if that's possible. Adding a rule on the host with guest destination IP is just fine in that case Thanks guys a lot, Dzenan > > vs-tools (https://listes.univ-reims.fr/sympa/d_read/vs-tools), has an > implementation of the first thing :-) > > Regards, > > -- > Mathieu Goessens > IT consultant. > > gebura@poolp.org > + 33 6 07 91 54 87 > http://gebura.eu.org > >