Re: Xen and Firewalling

[Sam Johnston <samjie@gmail.com>]

Thanks Rik,

I've just worked out why my recompiling failed before - needed to
specify ARCH=xen ala:

make ARCH=xen menuconfig

It would be good to see netfilter included by default in domU kernels
in future releases, unless there's a reasonable reason not to. I see
it was just added to dom0 recently by iap10@labyrinth.cl.cam.ac.uk:

ChangeSet@1.1703, 2005-01-29 22:20:09+00:00, iap10@labyrinth.cl.cam.ac.uk
  Add iptables modules to the default xen0 kernel, and add example
configuration files for a NAT setup.

Sam

On 4/18/05, Rik van Riel <riel@redhat.com> wrote:
> On Mon, 18 Apr 2005, Sam Johnston wrote:
> 
> > Is there a reason for this? Is simply doing a make menuconfig inside
> > linux-2.6.10-xenU and setting the requisite options sufficient?
> 
> Yes, reconfiguring and recompiling is enough.
> 
> --
> "Debugging is twice as hard as writing the code in the first place.
> Therefore, if you write the code as cleverly as possible, you are,
> by definition, not smart enough to debug it." - Brian W. Kernighan
>