OpenVZ Forum: Support » firewall into VE and isolating eth's from the host

Home » General » Support » firewall into VE and isolating eth's from the host

Show: Today's Messages :: Show Polls :: Message Navigator
E-mail to friend

firewall into VE and isolating eth's from the host [message #5029]

Tue, 08 August 2006 23:38

baldomero
Messages: 1
Registered: August 2006

Junior Member

Hello, this is my first post.

I want to install both, firewall and server on the same machine, and so, I would like to make one VE the firewall/router, and other VE's to the servers. The ideal situation is where the firewall has absolute control over the wan network interface, and the host is isolated from it for security reasons.

Is there anything similar to this posible with openvz?

Report message to a moderator

Re: firewall into VE and isolating eth's from the host [message #5036 is a reply to message #5029]

Wed, 09 August 2006 06:31

Vasily Tarasov
Messages: 1345
Registered: January 2006

Senior Member

You can dedicate your physycal interface to the VE (--netdev_add).
After that it isn't available on Host. Then adjust firewall/routing in this VE. HOST node will be available through interface venet.

HTH,
vass.

Report message to a moderator

Previous Topic:	SOLVED Sharing /home between vps, nfs/bind mount not working?
Next Topic:	SOLVED NAT doesn't seem to work

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

] [

]

Current Time: Thu Jul 18 22:22:24 GMT 2024

Total time taken to generate the page: 0.02534 seconds