From mboxrd@z Thu Jan  1 00:00:00 1970
From: Arun Sharma <arun.sharma@intel.com>
Subject: Re: iptables issue
Date: Wed, 17 Aug 2005 16:14:43 -0700
Message-ID: <4303C4E3.3050008@intel.com>
References: <A95E2296287EAD4EB592B5DEEFCE0E9D282BC6@liverpoolst.ad.cl.cam.ac.uk>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Return-path: <xen-devel-bounces@lists.xensource.com>
In-Reply-To: <A95E2296287EAD4EB592B5DEEFCE0E9D282BC6@liverpoolst.ad.cl.cam.ac.uk>
List-Unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-devel>,
	<mailto:xen-devel-request@lists.xensource.com?subject=unsubscribe>
List-Post: <mailto:xen-devel@lists.xensource.com>
List-Help: <mailto:xen-devel-request@lists.xensource.com?subject=help>
List-Subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-devel>,
	<mailto:xen-devel-request@lists.xensource.com?subject=subscribe>
Sender: xen-devel-bounces@lists.xensource.com
Errors-To: xen-devel-bounces@lists.xensource.com
To: Ian Pratt <m+Ian.Pratt@cl.cam.ac.uk>
Cc: xen-devel <xen-devel@lists.xensource.com>
List-Id: xen-devel@lists.xenproject.org

Ian Pratt wrote:
>>This line in network-brige script fails for me:
>>
>>     # iptables -A FORWARD -m physdev --physdev-in ${dev} -j ACCEPT
>>       iptables: No chain/target/match by that name
> 
> 
> You must have antispoof set to true to exercise that path in the script.

It was on by default.

> I've now enabled MATCH_PHYSDEV in the 32 and 64 bit xen0 kernels.

Thanks, it fixes networking for VMX domains.

	-Arun