Re: xen configuration

[Razvan Cojocaru <rcojocaru@bitdefender.com>]

On 10/08/2014 02:23 AM, Stephen Mack wrote:
> Greetings,
> 
> I have somewhat of a simple question about xen configuration possibilities.
> 
> I would like to know if it is possible to restrict the ports from which
> a xen domain can receive traffic and have all other attempts sent to
> another domain to be processed.
> 
> Say for example I have a web server deployed that I only want to accept
> traffic on port 80 and so it should never receive a request for
> ftp/ssh/dns/etc.  However if such a request ever were to come in for my
> web server, I want that traffic to be sent to my honeypot for
> processing, logging and possible remediation. 
> 
> I must say that I am very new to xen and have not read any
> documentation.  I am only looking for feedback if this is
> possible/feasible and if there are any negative implications of such a
> configuration.

Hello Stephen,

I'm not an expert on the subject, but Xen simply uses a bridge (xenbr0)
in dom0, so you can either use that or simply configure the firewall
directly in your guest, just as you would with any regular machine.

You should be able to find more details here:

http://wiki.xen.org/wiki/XenNetworking


Hope this helps,
Razvan Cojocaru