All of lore.kernel.org
 help / color / mirror / Atom feed
From: Dave Feustel <dfeustel@verizon.net>
To: qemu-devel@nongnu.org
Subject: [Qemu-devel] Internet access from qemu
Date: Mon, 14 Nov 2005 12:47:30 -0500	[thread overview]
Message-ID: <200511141247.30301.dfeustel@verizon.net> (raw)

I've got qemu 6.1 running on OpenBSD 3.7.
I'm  running the OpenBSD 3.7 image file which
I got from free.oszoo.net.
I want to be able to access the internet from qemu.

I am now able to access the apache website on the  host 
I have set up pf+nat for the private address of 10.0.0.2 
used by qemu, but I cannot make contact  with the internet.

Here is my pf ruleset, adapted from the example on page 141
of Artymiak's _Building Firewalls..._, 2nd ed.
 How do I fix it to enable ip traffic between qemu and the internet?

Thanks,
Dave Feustel

---my pf ruleset-----

scrub fragment reassemble
scrub reassemble tcp
NoRouteIPs = "{ 127.0.0.0/8, 192.168.0.0/16, 172.16.0.0/12 }"

ExtIF = "xl0"
ext_ad = "(xl0)"
prv_ad = "10.0.0.0/24"
nat_proto = "{tcp, udp, icmp}"

nat on $ExtIF inet proto $nat_proto \
        from $prv_ad to any -> $ext_ad

block in  quick on $ExtIF from $NoRouteIPs to any
block out quick on $ExtIF from any to $NoRouteIPs

-- 
Tired of having to defend against Malware?
You know: trojans, viruses, SPYWARE, ADWARE, 
KEYLOGGERS, rootkits, worms and popups.
Then Switch to OpenBSD with a KDE desktop!!!
***NOW with Virtual PC OS support via QEMU!***

             reply	other threads:[~2005-11-14 17:49 UTC|newest]

Thread overview: 7+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2005-11-14 17:47 Dave Feustel [this message]
2005-11-14 18:18 ` [Qemu-devel] Internet access from qemu André Braga
2005-11-14 18:44   ` Dave Feustel
2005-11-14 19:08     ` André Braga
2005-11-14 20:07       ` Dave Feustel
2005-11-14 20:19     ` Paul Brook
2005-11-14 20:42       ` Dave Feustel

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=200511141247.30301.dfeustel@verizon.net \
    --to=dfeustel@verizon.net \
    --cc=dfeustel@mindspring.com \
    --cc=qemu-devel@nongnu.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.