Re: Netstat Block at the Vswitch level

2007-11-15 Thread David Boyes
> Currently, on VM, if a web server sees someone trying to login using > incorrect userid/password, it will prompt them to stop/get help, if they > don't, via the VM TCPIP stack, the client is blocked. Kind of like a > dynamic firewall rule that lasts for a predefined period of time. > I wanted to

Re: Netstat Block at the Vswitch level

2007-11-15 Thread Aria Bamdad
Alan & David, Thank you both for your comments. I was pretty sure it couldn't be done but figured I ask. Actually, I am not trying to replace a firewall, I already have external boxes that firewall and filter using ACL. What I was trying to implement is something similar to what I have for my V

Re: Netstat Block at the Vswitch level

2007-11-15 Thread David Boyes
> I am pretty sure this can't be done at the vswitch level but > thought I ask if anyone has done something similar. I know I can > block at the guest level but wanted to block all guests at the switch > level. IP addresses are layer 3 entities. VSWITCH deals with layer 2 frames. The most you cou

Re: Netstat Block at the Vswitch level

2007-11-14 Thread Alan Altmark
On Wednesday, 11/14/2007 at 05:56 EST, Aria Bamdad <[EMAIL PROTECTED]> wrote: > I currently have an application that issues a NETSTAT BLOCK command for a > specific IP address to block requests from an external client > to the VM stack. > > I want to implement this on a VSWITCH level. For examp

Netstat Block at the Vswitch level

2007-11-14 Thread Aria Bamdad
Hi, I currently have an application that issues a NETSTAT BLOCK command for a specific IP address to block requests from an external client to the VM stack. I want to implement this on a VSWITCH level. For example, I want to be able to block an IP address from accessing any guest (in my case lin