Re: [Vserver] having a routing problem from guests

2006-10-03 Thread Herbert Poetzl
On Mon, Oct 02, 2006 at 11:46:32AM -0400, Chuck wrote: On Monday 02 October 2006 10:18, Herbert Poetzl wrote: oops... forgot.. ok so then i would add the statements below with proper ip for each of the 4 interfaces? yep best, Herbert add a masquerading/snat rule for each 'outgoing'

Re: [Vserver] having a routing problem from guests

2006-10-03 Thread Chuck
On Tuesday 03 October 2006 11:42, Herbert Poetzl wrote: would that mix up things when guests on the same interface come into play? if on the host 32.2 interface a guest was 32.30 ?.. or would i have to add an iptables and iproute rule for each guest ip as well? On Mon, Oct 02, 2006 at

Re: [Vserver] having a routing problem from guests

2006-10-03 Thread Herbert Poetzl
On Tue, Oct 03, 2006 at 11:51:36AM -0400, Chuck wrote: On Tuesday 03 October 2006 11:42, Herbert Poetzl wrote: would that mix up things when guests on the same interface come into play? if on the host 32.2 interface a guest was 32.30 ?.. or would i have to add an iptables and iproute rule

Re: [Vserver] having a routing problem from guests

2006-10-03 Thread Chuck
On Tuesday 03 October 2006 12:06, Herbert Poetzl wrote: oh boy.. heh i may be getting into a real situation here.. each of the 3 public interfaces will have an average of 10 -20 guests on it by the time i am done and at least 8 of those guests will have upward of 10 ips in it with some 26 or

Re: [Vserver] having a routing problem from guests

2006-10-02 Thread Herbert Poetzl
On Fri, Sep 29, 2006 at 11:23:11AM -0400, Chuck wrote: On Friday 29 September 2006 09:54, Herbert Poetzl wrote: On Thu, Sep 28, 2006 at 07:35:09PM -0400, Chuck wrote: my 32 net guests cannot contact outside 39 net machines on our same network. they can contact other 39 net guests on the

Re: [Vserver] having a routing problem from guests

2006-10-02 Thread Chuck
On Monday 02 October 2006 10:18, Herbert Poetzl wrote: cool thanks... ill make those changes and see how it works :) On Fri, Sep 29, 2006 at 11:23:11AM -0400, Chuck wrote: On Friday 29 September 2006 09:54, Herbert Poetzl wrote: On Thu, Sep 28, 2006 at 07:35:09PM -0400, Chuck wrote:

Re: [Vserver] having a routing problem from guests

2006-10-02 Thread Chuck
On Monday 02 October 2006 10:18, Herbert Poetzl wrote: oops... forgot.. ok so then i would add the statements below with proper ip for each of the 4 interfaces? add a masquerading/snat rule for each 'outgoing' packet on a specific interface, like this:  iptables -t nat -I POSTROUTING -o

Re: [Vserver] having a routing problem from guests

2006-09-29 Thread Herbert Poetzl
On Thu, Sep 28, 2006 at 07:35:09PM -0400, Chuck wrote: my 32 net guests cannot contact outside 39 net machines on our same network. they can contact other 39 net guests on the same host. conversely, the external 39 net machine cannot contact any 32 net ip on the vserver host or any guest.. I

Re: [Vserver] having a routing problem from guests

2006-09-29 Thread Chuck
On Friday 29 September 2006 09:54, Herbert Poetzl wrote: On Thu, Sep 28, 2006 at 07:35:09PM -0400, Chuck wrote: my 32 net guests cannot contact outside 39 net machines on our same network. they can contact other 39 net guests on the same host. conversely, the external 39 net machine cannot

Re: [Vserver] having a routing problem from guests

2006-09-29 Thread Roderick A. Anderson
Taking this a step further I'm trying to do something similar and getting _strange_ results. Using totally fake IPs here is what I'm trying to set up. ( As typing this I see Chuck just posted to the thread with similar information. ) Host system with three NICs: eth0, eth1, eth2. Fedora

Re: [Vserver] having a routing problem from guests

2006-09-29 Thread Chuck
On Friday 29 September 2006 11:48, Roderick A. Anderson wrote: looks like you are doing what i did in the beginning.. using ifconfig.. wont work.. you must install iproute2 and use the rules and tables in order for it to work. my config is similar to what would be needed for iproute

Re: [Vserver] having a routing problem from guests

2006-09-29 Thread Chuck
On Friday 29 September 2006 11:53, Chuck wrote: [snip] Lastly iptables is pretty open. The problem is that though I can ping from a different network to both of the host's to IPs and I can ping out from the three guests that use eth0 and I can ping the eth1 guest from a eth0 guest I

Re: [Vserver] having a routing problem from guests

2006-09-29 Thread Roderick A. Anderson
Chuck wrote: On Friday 29 September 2006 11:53, Chuck wrote: [snip] Lastly iptables is pretty open. The problem is that though I can ping from a different network to both of the host's to IPs and I can ping out from the three guests that use eth0 and I can ping the eth1 guest from a eth0