[Vserver] vserver iptables

2004-12-23 Thread Bastian Boday 
Hello
I'm new to the list.
I installed a vserver with kernel 2.6 
(http://home.xnull.de/work/gentoo/vserver/guide/) on my gentoo server
As network interface I use an alias  (eth1:0)

As firewall I'm using shorewall
eth0 -- Internet
eth1 is the card of my loc zone. 192.168.2.0/24
eth1:0 is the alias from the vserver 192.168.50.50
from the vserver I can connect to eth0 but not to the internet. From my 
local net everything works fine.

I know, I need something like this... ??
iptables -A INPUT  -i eth0 -d 192.168.2.50 -j ACCEPT
iptables -A OUTPUT -o eth0 -s 192.168.2.50 -j ACCEPT
Any help would be appreciated
Bast
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver

Re: [Vserver] vserver iptables

2004-12-23 Thread Benedikt Böhm 
On Thursday 23 December 2004 18:27, Bastian Boday wrote:
 from the vserver I can connect to eth0 but not to the internet. From my
 local net everything works fine.

You need to do SNAT in order to get your vservers connecting to the internet 
when you're using different IPs on the root dev and the alias...

it looks like this:
/sbin/iptables -t nat -A POSTROUTING -s 192.168.50.0/255.255.255.0 -d ! 
192.168.50.0/255.255.255.0 -j SNAT --to-source 192.168.2.x (this should be 
the ip of eth1)

Bene

-- 
Benedikt Boehm  www.croup.de
[EMAIL PROTECTED]   GPG-ID: 0x32585A3D

If it moves, compile it. -- Gentoo


pgpHl5UvTaPfq.pgp
Description: PGP signature
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver

[Vserver] vserver.start, improved error message about startup sequence

2004-12-23 Thread Thorsten Gunkel 
Hi,
I want to suggest to change this error-message:

#v+
--- util-vserver-0.30.196/scripts/vserver.start  2004-08-27 23:06:45.0 
+0200
+++ vserver.start2004-12-24 00:41:36.0 
+0100
@@ -32,14 +32,16 @@
 
 if test $is_configured -a -z $is_executed; then
warning $
-An error occured while executing the vserver startup sequence; when
+An error occurred while executing the vserver startup sequence; when
 there are no other messages, it is very likely that the init-script
 ([EMAIL PROTECTED]) failed.
 
 Common causes are:
 * /etc/rc.d/rc on Fedora Core 1 and RH9 fails always; the 'apt-rpm' build
   method knows how to deal with this, but on existing installations,
-  appending 'true' to this file will help.
+  appending 'true' to this file will help.
+
+* Gentoo clients need the value gentoo in 
etc/vservers/YOURNAME/apps/init/style
 fi
 
 if test $is_executed; then
#v-


signature.asc
Description: Digital signature
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver

[Vserver] Razor problems with the mailinglist (was: Listserver trouble)

2004-12-23 Thread Thorsten Gunkel 
Hi *, hi list-maintainer,
can anyone confirm that messages from this list are untruly reported as
spam to razor[1] by some subscribers?

To quote the message I'm just replying to (this header has been added
by spamassassin):

,
| X-Spam-Status: No, score=-3.3 required=5.0 tests=BAYES_00,
| RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_BY_IP autolearn=no
| version=3.0.1
`

If this is true and if your mailserver drops/rejects/sorts mails tagged by
razor you'll miss mails from this list.

If others can confirm the problem a solution might be [2].

regards
 Thorsten

Footnotes: 
[1]  http://razor.sourceforge.net/
[2]  http://sourceforge.net/mailarchive/message.php?msg_id=5813054



signature.asc
Description: Digital signature
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver

[Vserver] vserver NAME COMMAND vs vserver COMMAND NAME

2004-12-23 Thread Thorsten Gunkel 
Hi *,
what do you think about this enlarged error-message?

#v+
--- util-vserver-0.30.196/scripts/vserver2004-08-27 23:06:45.0 
+0200
+++ vserver  2004-12-24 02:17:56.0 
+0100
@@ -180,7 +180,22 @@
 test -d $VSERVER_DIR || {
 echo $\
 Can not find vserver-setup; please make sure that the vserver configuration
-is located at $VSERVER_DIR/.
+is located at $VSERVER_DIR/.
+
+Note that the syntax for the vserver script is
+
+ vserver NAME COMMAND
+
+and NOT
+
+ vserver COMMAND NAME
+
+so
+
+ vserver start foobar
+
+will search for a vserver named 'start' (which will probably not exist) and an 
option 'foobar' (which
+definitely doesn't exist).
 exit 5
 } 2
#v-


signature.asc
Description: Digital signature
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver

[Vserver] Merry Xmas to everyone!

2004-12-23 Thread Herbert Poetzl 

Merry Xmas!

enjoy linux-vserver and all the other stuff ...

and remember, software should be free!

best,
Herbert

___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver