Hi Dag, I've spent the last weeks doing some testing with CS4.9 and Xen 6.5 and I did not have this issue before. Only the last two tests (yesterday and last week) this behaviour popped up, both with clean Xen installations.
Looking though the last hotfixes, this one might be the culprit, although this is rather a gut feeling. -----Ursprüngliche Nachricht----- Von: Dag Sonstebo [mailto:dag.sonst...@shapeblue.com] Gesendet: Montag, 21. November 2016 10:53 An: users@cloudstack.apache.org Betreff: Re: Firewall on xenserver Hi Ghait, This doesn’t sound like normal behavior for XenServer 6.5 under CloudStack – I’m not aware of any issues requiring the XS firewall to be modified. I would suggest rebuilding your hosts and re-add to CloudStack. With regards to OpenManage – I can see this does require some tweaking of firewalls (http://blog.hostduplex.com/2015/01/31/install-dell-openmanage-xenserver-6-5/ ) – but even this doesn’t require you to disable the firewall (this blog post suggests just adding a rule and restarting iptables). All in all my advice would be to troubleshoot and fix the underlying issue rather than disabling iptables – which could be a potential security issue. Regards, Dag Sonstebo Cloud Architect ShapeBlue On 21/11/2016, 09:39, "Ghaith Bannoura" <gbanno...@etq.com> wrote: The purpose for it as below : 1-the system VMs agent showing not running , after I stopped the firewall in xenservers its working normally 2-the instances accessible only when I stop the iptables from xenservers 2- I installed open manage in the servers (Manage hardware for Dell servers) that need changes from iptables ) I have advanced zone with ACS 4.8 and xenserver 6.5 Best Regards, EtQ, Inc. Ghaith Bannoura Senior System Administrator MCT, MCSE (Messaging, Server Infrastructure) MCSA (Windows Server 2008, 2012), MCP Phone: +9626-537-0923 Ext. 376 P gbanno...@etq.com G http://www.etq.com -----Original Message----- From: Dag Sonstebo [mailto:dag.sonst...@shapeblue.com] Sent: Monday, November 21, 2016 11:05 AM To: users@cloudstack.apache.org Subject: Re: Firewall on xenserver Hi Ghait, Can you explain your rationale - i.e. what is the purpose of you changing XenServer firewall rules? Citrix seems to have a how-to article on https://support.citrix.com/article/CTX123930 . Regards, Dag Sonstebo Cloud Architect ShapeBlue On 21/11/2016, 08:14, "Ghaith Bannoura" <gbanno...@etq.com> wrote: Hello All, I have ACS 4.8 with xenserver 6.5 I modified the iptables in xenserver and its returned back as default , also I stopped the iptables many times and its returned running again . Can you please advice where I can modify iptables permanently in xenserver . Best Regards, EtQ, Inc. Ghaith Bannoura Senior System Administrator MCT, MCSE (Messaging, Server Infrastructure) MCSA (Windows Server 2008, 2012), MCP * Phone: +9626-537-0923 Ext. 376 * gbanno...@etq.com <mailto:mal-khay...@etq.com> * http://www.etq.com<http://www.etq.com/> dag.sonst...@shapeblue.com www.shapeblue.com 53 Chandos Place, Covent Garden, London WC2N 4HSUK @shapeblue dag.sonst...@shapeblue.com www.shapeblue.com 53 Chandos Place, Covent Garden, London WC2N 4HSUK @shapeblue Jeroen Keerl Keerl IT Services GmbH Birkenstraße 1b . 21521 Aumühle +49 177 6320 317 www.keerl-it.com i...@keerl-it.com Geschäftsführer. Jacobus J. Keerl Registergericht Lubeck. HRB-Nr. 14511 Unsere Allgemeine Geschäftsbedingungen finden Sie hier.