Subject: Re: [vserver] Question on the FAQ
From: Herbert Poetzl <herbert@13thfloor.at>
Date: Tue, 18 Dec 2007 23:47:14 +0100

On Tue, Dec 18, 2007 at 11:56:10AM -0800, Ng, Cheon-woei wrote:
> Hi All,
> 
> This is my first time visiting the vserver site. Upon reading the FAQ,
> I came across this question:
> 
> http://linux-vserver.org/Frequently_Asked_Questions#Trying_to_connect_to
> _a_vserver_from_the_host_or_another_vserver_on_the_same_host_fails
> 
>  
> 
> Below is the copy of the question and answer:
> 
> 
> Trying to connect to a vserver from the host or another vserver on the
> same host fails 
> 
> 
> strace shows 
> 
>  
> sin_addr=inet_addr("xx.xx.xx.xx")}, yy) = -1 EINVAL (Invalid argument)
> 
> A: The host/guest cannot communicate with another guest on same host. 
> 
> *         check all netmasks on all interfaces (do they overlap) ? 
> *         check policy routing (disable it temporary) ? 
> *         check that lo is up (Networking within a host/guest always
>           uses lo interface)
> 
> The answer has this line: 
> 
> The host/guest cannot communicate with another guest on same host
> 
> Is this answer just a rephrasing of the question?  

I would say, the person adding this FAQ, did mess up the
formatting a little, and this is the question/observation
while the points above might be good reasons ...

personally I'm missing firewalling there, because my best
bet would be too restrictive iptables rule

> Or is this a true vserver's limitation?  

no, there is no such limitation. Linux-VServer networking 
happens on the host, so that would be equivalent to saying
a Linux box cannot connect with itself (via IP)

> Thank you!

HTC,
Herbert

> Sincerely,
> 
> Woei Ng
> 
>  
> 
>  
>