Re: [Lxc-users] Routing issues

2013-06-05 Thread Serge Hallyn
Quoting Rory Campbell-Lange (r...@campbell-lange.net): > On 04/06/13, Michael H. Warfield (m...@wittsend.com) wrote: > > > I'd be grateful to know if anyone has some firewall (iptables) advice for > > > allowing traffic to the container? I expect to run another firewall on the > > > container itsel

Re: [Lxc-users] Routing issues

2013-06-04 Thread Rory Campbell-Lange
On 04/06/13, Michael H. Warfield (m...@wittsend.com) wrote: > > I'd be grateful to know if anyone has some firewall (iptables) advice for > > allowing traffic to the container? I expect to run another firewall on the > > container itself. > > That's probably your FORWARD chain there. Set that pol

Re: [Lxc-users] Routing issues

2013-06-04 Thread Michael H. Warfield
On Tue, 2013-06-04 at 11:21 +0100, Rory Campbell-Lange wrote: > On 03/06/13, Serge Hallyn (serge.hal...@ubuntu.com) wrote: > > Quoting Rory Campbell-Lange (r...@campbell-lange.net): > > > On 04/06/13, Papp Tamas (tom...@martos.bme.hu) wrote: > > > > > > > > What is the IP address of the container

Re: [Lxc-users] Routing issues

2013-06-04 Thread Serge Hallyn
Quoting Rory Campbell-Lange (r...@campbell-lange.net): > On 04/06/13, Rory Campbell-Lange (r...@campbell-lange.net) wrote: > > On 03/06/13, Serge Hallyn (serge.hal...@ubuntu.com) wrote: > > > Quoting Rory Campbell-Lange (r...@campbell-lange.net): > > > > On 04/06/13, Papp Tamas (tom...@martos.bme.h

Re: [Lxc-users] Routing issues

2013-06-04 Thread Rory Campbell-Lange
On 04/06/13, Rory Campbell-Lange (r...@campbell-lange.net) wrote: > On 03/06/13, Serge Hallyn (serge.hal...@ubuntu.com) wrote: > > Quoting Rory Campbell-Lange (r...@campbell-lange.net): > > > On 04/06/13, Papp Tamas (tom...@martos.bme.hu) wrote: > > > The host is on aa.bb.cc.103 (a public net addr

Re: [Lxc-users] Routing issues

2013-06-04 Thread Rory Campbell-Lange
On 03/06/13, Serge Hallyn (serge.hal...@ubuntu.com) wrote: > Quoting Rory Campbell-Lange (r...@campbell-lange.net): > > On 04/06/13, Papp Tamas (tom...@martos.bme.hu) wrote: > > > > > > What is the IP address of the container? > > > > The host is on aa.bb.cc.103 (a public net address) > > and the

Re: [Lxc-users] Routing issues

2013-06-03 Thread Serge Hallyn
Quoting Rory Campbell-Lange (r...@campbell-lange.net): > On 04/06/13, Papp Tamas (tom...@martos.bme.hu) wrote: > > > > What is the IP address of the container? > > The host is on aa.bb.cc.103 (a public net address) > and the container is on aa.bb.cc.87. > > I can get from 87 to 103, but I can't

Re: [Lxc-users] Routing issues

2013-06-03 Thread Rory Campbell-Lange
On 04/06/13, Papp Tamas (tom...@martos.bme.hu) wrote: > > What is the IP address of the container? The host is on aa.bb.cc.103 (a public net address) and the container is on aa.bb.cc.87. I can get from 87 to 103, but I can't ping the gateway from the container. > If it's a private address and y

Re: [Lxc-users] Routing issues

2013-06-03 Thread Papp Tamas
On 06/04/2013 12:52 AM, Rory Campbell-Lange wrote: > > Hi Tamas > > Thanks very much for your email. First of all thanks very much for the > note about the lxc.network.ipv4 paramenter -- I disabled that and > routing seems to be fine. > > My question was unclear -- sorry! My host is on the internet

Re: [Lxc-users] Routing issues

2013-06-03 Thread Rory Campbell-Lange
On 04/06/13, Papp Tamas (tom...@martos.bme.hu) wrote: > On 06/03/2013 06:55 PM, Rory Campbell-Lange wrote: > > > > I can ssh into the main host from the lxc host. However I cannot hit the > > internet from the lxc host. I'd be grateful for some pointers. > > > > At present I have the following conf

Re: [Lxc-users] Routing issues

2013-06-03 Thread Papp Tamas
On 06/03/2013 06:55 PM, Rory Campbell-Lange wrote: > > I have (with Rob van der Hoeven's help) setup a Debian Wheezy container on a > Wheezy host. This worked well. > > I can ssh into the main host from the lxc host. However I cannot hit the > internet from the lxc host. I'd be grateful for some po

[Lxc-users] Routing issues

2013-06-03 Thread Rory Campbell-Lange
I have (with Rob van der Hoeven's help) setup a Debian Wheezy container on a Wheezy host. This worked well. I can ssh into the main host from the lxc host. However I cannot hit the internet from the lxc host. I'd be grateful for some pointers. At present I have the following configuration on the