Subject: Re: [vserver] iptables on guest
From: dzenan.causevic@wise-t.com
Date: Thu, 19 Nov 2009 17:09:38 -0100

> John Alberts wrote:
>> You can't run iptables on any of the guests only on the host.  Just
>> specify the IP of the guest in the destination of the rule.
>>
>> Regards,
>> John
>>
>>
>> On Thu, Nov 19, 2009 at 11:07 AM,  <dzenan.causevic@wise-t.com> wrote:
>>
>>> I have iptables on my host, but I installed iptables on guest as well
>>> (having two firewall levels won't hurt). However I couldn't find
>>> /etc/sysconfig/iptables file so I copied one from my host.
>>> Now when I try to start iptables I get following error:
>>>
>>> bash-3.2# service iptables start
>>> Applying iptables firewall rules: iptables-restore v1.3.5:
>>> iptables-restore: unable to initializetable 'filter'
>>>
>>> Error occurred at line: 3
>>> Try `iptables-restore -h' or 'iptables-restore --help' for more
>>> information.
>>>                                                           [FAILED]
>>>
>>> If I try to run iptables-restore it hangs forever. Is it allowed to run
>>> iptables both on host and guest?
>>>
>>> Dzenan
>>>
> Yeah, but you can parse a tiny script on the host per client.
> Or request the host to add/remove/rules related to the client.

That's what I am gonna do. I don't really need two firewalls but I was
curious if that's possible. Adding a rule on the host with guest
destination IP is just fine in that case

Thanks guys a lot,
Dzenan

>
> vs-tools (https://listes.univ-reims.fr/sympa/d_read/vs-tools), has an
> implementation of the first thing :-)
>
> Regards,
>
> --
> Mathieu Goessens
> IT consultant.
>
> gebura@poolp.org
> + 33 6 07 91 54 87
> http://gebura.eu.org
>
>