I'm trying to setup IPTABLES on my xen host server that will block incoming and/or outgoing access to a xen client on the same machine. Specifically, I need to block outgoing port 25 traffic and incoming port 53 traffic to a specific container.
Regular IPTABLE rules only appear to affect traffic going to the host -- not the xen client.
For my server, eth0 is the internal network, eth1 is the external.
The following rule set seems like it should work, but the container is not affected at all:
iptables -A OUTPUT -p tcp -m state –state NEW,ESTABLISHED,RELATED –sport 25 -d -j REJECT iptables -A INPUT -p tcp -m state –state NEW,ESTABLISHED,RELATED –dport 53 -d -j REJECT iptables -A INPUT -p udp -m state –state NEW,ESTABLISHED,RELATED –dport 53 -d -j REJECT
So basically, how do I setup an IPTABLE rule that will apply to the xen client instead of the xen host?