Hi Ghait, This doesn’t sound like normal behavior for XenServer 6.5 under CloudStack – I’m not aware of any issues requiring the XS firewall to be modified.
I would suggest rebuilding your hosts and re-add to CloudStack. With regards to OpenManage – I can see this does require some tweaking of firewalls (http://blog.hostduplex.com/2015/01/31/install-dell-openmanage-xenserver-6-5/ ) – but even this doesn’t require you to disable the firewall (this blog post suggests just adding a rule and restarting iptables). All in all my advice would be to troubleshoot and fix the underlying issue rather than disabling iptables – which could be a potential security issue. Regards, Dag Sonstebo Cloud Architect ShapeBlue On 21/11/2016, 09:39, "Ghaith Bannoura" <gbanno...@etq.com> wrote: The purpose for it as below : 1-the system VMs agent showing not running , after I stopped the firewall in xenservers its working normally 2-the instances accessible only when I stop the iptables from xenservers 2- I installed open manage in the servers (Manage hardware for Dell servers) that need changes from iptables ) I have advanced zone with ACS 4.8 and xenserver 6.5 Best Regards, EtQ, Inc. Ghaith Bannoura Senior System Administrator MCT, MCSE (Messaging, Server Infrastructure) MCSA (Windows Server 2008, 2012), MCP Phone: +9626-537-0923 Ext. 376 P gbanno...@etq.com G http://www.etq.com -----Original Message----- From: Dag Sonstebo [mailto:dag.sonst...@shapeblue.com] Sent: Monday, November 21, 2016 11:05 AM To: users@cloudstack.apache.org Subject: Re: Firewall on xenserver Hi Ghait, Can you explain your rationale - i.e. what is the purpose of you changing XenServer firewall rules? Citrix seems to have a how-to article on https://support.citrix.com/article/CTX123930 . Regards, Dag Sonstebo Cloud Architect ShapeBlue On 21/11/2016, 08:14, "Ghaith Bannoura" <gbanno...@etq.com> wrote: Hello All, I have ACS 4.8 with xenserver 6.5 I modified the iptables in xenserver and its returned back as default , also I stopped the iptables many times and its returned running again . Can you please advice where I can modify iptables permanently in xenserver . Best Regards, EtQ, Inc. Ghaith Bannoura Senior System Administrator MCT, MCSE (Messaging, Server Infrastructure) MCSA (Windows Server 2008, 2012), MCP * Phone: +9626-537-0923 Ext. 376 * gbanno...@etq.com <mailto:mal-khay...@etq.com> * http://www.etq.com<http://www.etq.com/> dag.sonst...@shapeblue.com www.shapeblue.com 53 Chandos Place, Covent Garden, London WC2N 4HSUK @shapeblue dag.sonst...@shapeblue.com www.shapeblue.com 53 Chandos Place, Covent Garden, London WC2N 4HSUK @shapeblue
