0
votes
0answers
18 views

Forward connecting IP address to KVM guests

I'm running kvm with iptables configured to use DNAT and masquerading. However the guest machines are logging the host bridge ip not the connecting client IP address. Is there a way to configure ...
2
votes
1answer
283 views

libvirt and network filtering with nat - iptables overrides

At first, I want to say: I know, it was done initially wrong and I want to avoid doing everything again from the scratch because of general downtime. I am running libvirt/KVM on RHEL. I've got VM ...
1
vote
1answer
131 views

Access web server on VM from a machine in a different subnet

I cannot access to a web application running on a virtual machine hosted by KVM from a machine in a different subnet. So, I would like to access from the machine 192.168.1.2 (top right in green ...
0
votes
1answer
227 views

KVM: port forwarding to guest VM

I'm using KVM on Debian wheezy. I want to connect to the guest using ssh with the command ssh 1.2.3.4 -p 10122. What I do is: root@host$ iptables -t nat -A PREROUTING -p TCP --dport 10122 -j DNAT ...
0
votes
0answers
59 views

Nested VM Guest Access from Host - KVM

I have nested VM setup. I have a host with a single network interface card with a public facing IP. I have bridged this interface so that eth0 does not have a IP and br0 is having the IP instead. I ...
0
votes
0answers
74 views

Best way to setup linux gateway and KVM bridge

Ok so I have a Linux gateway host that acts as routing/file server, two NIC's, EXT and INT. Iptables is handling the rules to forward the traffic on a RH based system, as well has having some complex ...
0
votes
0answers
83 views

KVM directly connect to guests without passing router

I have a KVM host running 5 virtual servers. Each virtual server is using a separate bridge interface, like br0, br1, br3... Each virtual server has a own public IP. Now, I would like to be able to ...
0
votes
1answer
103 views

NAT one network to another using iptables

Trying to NAT ips in different network using iptables. KVM host with ip 10.10.11.36 on bridge br0. Two vms are running with ip 192.168.11.60 and 192.168.11.57 sharing bridge br0. Want to NAT all ...
0
votes
1answer
66 views

missing network usage through iptables

I inserted a rule to iptables to track the input usage to a certain ip address. The vps server's IP is 192.168.1.5 and the guest os's IP is 192.168.1.115. I ran 'yum update' inside the guest OS to get ...
0
votes
1answer
115 views

KVM firewall to disallow internet access for group of guests

I've got a KVM server inside a local network (192.168.10.0/24). This server has three interfaces, which are all publicly bridged [1]. Atm I'm only using two of the three interfaces, so the virtual ...
0
votes
1answer
142 views

libvirt vm cant connect to smtp

I have a problem with one of my virtual machines. In my Setup the kvm/libvirt hypervisor acts as the firewall and does all the NAT. There is 1 virtual network (virbr2) for all of the virtual machines. ...
1
vote
1answer
2k views

DHCP reply packets do not make it into KVM instance in OpenStack

I'm running a KVM instance inside of OpenStack, and it isn't getting an IP address from the DHCP server. Using tcpdump, I can see the request and reply packets on vnet0 of the compute host: # ...
0
votes
1answer
771 views

Configure IPTables on KVM host to block guest bridge traffic

I am working on a thesis research project, and I am having some difficulty figuring out how to get iptables (running on the KVM host) to block traffic (or rather, manipulate traffic) destined for a ...
2
votes
1answer
493 views

How do I prevent libvirt from adding iptables rules for guest NAT networks?

Similar to this old request on BugZilla for Fedora 8, I'm hoping something has changed since then or someone knows another way. I want to manage the iptables rules by hand—the one-size-fits-all ...
0
votes
1answer
207 views

iptables, forward traffic for ip not active on the host itself

I have kvm guest which's netword card is conntected to the host using a tap device. The tap device is part of a bridge on the host together with eth0 so it can access the public network. So far ...
0
votes
1answer
95 views

How to access vm inside a vm via VNC?

For some reasons I installed virtual machines inside a virtual machine, like this: A( B( C )) where A is the physical machine, B is a vm and the network type is NAT. And C is also a virtual machine ...
4
votes
2answers
2k views

KVM Guest with NAT + Bridged networking

I currently have a few KVM Guests on a dedicated server with bridged networking (this works) and i can successfully ping the outside ips i assign via ifconfig (in the guest). However, due to the ...
2
votes
1answer
86 views

Nullrouting a KVM guest from the node

I have a "development" KVM server here at the office, setup in a bridged networking setup with a few KVM guests running on it. For each KVM guest a virtual interface is created on the node with the ...
1
vote
2answers
188 views

KVM + Cloudmin + IpTables

I have a KVM virtualization on a machine. I use Ubuntu Server + Cloudmin (in order to manage virtual machine instances). On a host system I have four network interfaces: ebadmin@saturn:/var/log$ ...
1
vote
1answer
420 views

centos 6.3 kvm external ip forwarding to guests

I have a centos 6.3 server with kvm installed. The server has 4 external ips and one NIC. 176.9.xxx.xx1 176.9.xxx.xx2 176.9.xxx.xx3 176.9.xxx.xx4 I use the following configuration ifcfg-eth0 as ...
1
vote
2answers
277 views

Iptables firewall on a KVM host

I'm running some guests on a KVM dedicated server, and I would like to use the host as a firewall, to control all accesses down from the hypervisor, using forwarding rules. It is a good idea or is ...
0
votes
2answers
301 views

Allowing outbound traffic with APF/iptables for OpenVZ container

I have apf installed on a OpenVZ container (proxmox 2.1). The config is pretty much vanilla and things are working. My external services like ssh and http are working. My problem is that all ...
1
vote
1answer
165 views

Multiple IPs on eth0, bridging to VMs and routing

Current situation: I have a host running 3 virtual machines. One IP for eth0 (xxx.xxx.xxx.239) and one additional for eth0:1 (yyy.yyy.yyy.35). This works fine for me... Host (eth0) (xxx.xxx.xxx.239) ...
1
vote
1answer
477 views

iptables and virtual machines of KVM, no ping, no ssh from VMs

Hi everyone :) I have two virtual machines KVM. I did two alias to eth0 - eth0:0 and eth0:1 and put them on an external IPs (eth0:0 - 89.114.122.3, eth0:1 - 89.114.122.4)​​. Now the problem is: ...
0
votes
1answer
656 views

iptables and virtual machines of KVM, external ip

Hi everyone :) In general, I'm still struggling with the virtual machine KVM. I did two alias to eth0 - eth0:0 and eth0:1 and put them on an external IPs (eth0:0 - 89.114.122.3, eth0:1 - ...
0
votes
1answer
837 views

apt-get update can not connect

i run a dedicated ubuntu 10.04 server. i use kvm/libvirt/virsh to run a virtual machine that's also ubuntu 10.04. i bridged the network (1 of 2 IPs is routed via NAT to the LAN, where my VM ...
2
votes
1answer
1k views

KVM second private network (bridged), how to get working?

this seems to be a hard problem. I would therefore be very thankfull for your advice. I spend two days trying to get this running, but with no success. (The Public IP Stuff is working, but not the ...
2
votes
4answers
534 views

physical to virtual (kvm) migration with saving IP of guest and reusing it at host

I want to do a physical-to-virtual migration of BSD server, saving the IP address. The destination virtual host is Linux/KVM. The current setup: I had a BSD server with failed Hardware. I have just ...
0
votes
1answer
513 views

Firewall on a KVM host, prevent access to VM:s

I have a Linux machine running KVM with several VM:s, all have public IP:s. For the time being I have everything routed through a bridge (br0) and this works well. I also need a firewall on the host ...
0
votes
1answer
722 views

NAT KVM Guest and Route All Guest Traffic to Host VPNC Connection

I know this is ridiculous, but our admin said he would beat me to death if I tried bridging mode and refuses to enable port security on our Cisco switches. Is there any way to get NAT traffic from ...
1
vote
1answer
665 views

Linux-KVM / iptables: prevent guest spoofing by matching ip+mac address on bridge?

I have my KVM guests on a standard br0 bridge setup: auto br0 iface br0 inet static address 192.168.1.117 netmask 255.255.255.0 network 192.168.1.1 broadcast 192.168.1.225 gateway ...
3
votes
2answers
1k views

Allowing traffic only from a specified IP addresses using iptables

I have a dedicated server (which I only use a lab/testing environment). On the server CentOS 5.6 is running and it is functioning as a KVM host. To secure things a little I want to do the following ...
0
votes
1answer
440 views

RDP to Windows XP guest on kvm constantly reconnecting after logon

ISSUE I have, after some days of "hard" work, managed to correctly configure kvm on a Centos 5.5 host. I have 2 VM running successfully. Since I only have one public IP address (for the kvm host) I ...
2
votes
1answer
445 views

Forwarding ports of KVM guests

I have enabled network forwarding on ip say 10.20.20.34 on eth0. I am running KVM on say 10.20.20.45 and a vm is running on it with its display on port 5902. I can access the display if i connect ...
2
votes
1answer
514 views

Configure iptables with a bridge and static IPs

I have my server set up with several public IP addresses, with a network configuration as follows (with example IPs): eth0 \- br0 - 1.1.1.2 |- [VM 1's eth0] | |- 1.1.1.3 | \- ...
0
votes
1answer
684 views

virtual networking with iptables in KVM host

I'm working on a design for a Linux based appliance and looking to use KVM for the virtualisation layer. The system has 3 VM's interconnected in very specific ways. The fag packet diagram I've been ...
2
votes
1answer
342 views

iptables string match works on VM host but not guest

Have been tested some iptables string match rules on Linux KVM virtual machines with a bridged interface (Fedora 12 & 13 64-bit), for example a rule in the INPUT Chain that is before other port 80 ...
2
votes
4answers
2k views

Firewall configuration on Ubuntu KVM host

I have an Ubuntu 9.10 server with KVM virtualization installed on it (I'll call it HOST). It has three VMs running, one with Apache installed (calling it APACHE), one with Mysql installed (calling it ...
2
votes
1answer
598 views

KVM virtualized CentOS can send/recieve TCP but not UDP

I've installed CentOS 5 inside KVN on FC12. I've setup a bridged network that works fine. I can ping the virtualized host from any of my other computers and the other way as well. I can also access ...
0
votes
1answer
686 views

Set host firewall so VMs obtain dynamic IP from dnsmasq

Virtual machines (KVM/libvirt) fail to obtain a dynamic IP address from the libvirt-launched dnsmasq running on a CentOS host when the firewall is running. When I turn off the firewall (CSF), the ...