Thanks Dominik, that fits with the way it worked best during my experimentation.
The unix socket is a good idea, I had wondered how to get round that.

It turns out that my issue was a complete newb one - I used tcpdump from within the guest and found the packets were reaching the OS after all. I had used the CLI to add rules to iptables on the guest for the mail server, not realising that it was dumb and was appending the rules AFTER the default-supplied REJECT rule. After re-writing and reloading the ruleset, all is now well.

Thanks for the assistance and the tips.

-------------------------------------------
On 09/06/2015 23:32, Dominik Hassler wrote:
Graham,

With "dedicated vnic" I meant that you don't apply an address for it
within the zone. The zone is aware of it but you should not set it up.
Sorry if my description was a bit misleading...

If you want to use VNC you'll have to setup a second vnic in the zone
config and apply an address for that one or use a unix socket for VNC
which is my preferred option.

Adding the vnics as network resources is perfectly fine.

_______________________________________________
OmniOS-discuss mailing list
[email protected]
http://lists.omniti.com/mailman/listinfo/omnios-discuss

Reply via email to