Re: Vserver networking: to make a forward only. : a comment

2009-07-16 Thread Paul E Condon
On 2009-07-16_01:08:08, lee wrote: > On Wed, Jul 15, 2009 at 07:57:36PM +0700, Sthu Deus wrote: > > > Meaning that all packets come to and back from - only for/from the > > v-server. That the home machine will not be processing the packets. > > In a way, that isn't possible because there has to

Re: Vserver networking: to make a forward only.

2009-07-16 Thread lee
On Wed, Jul 15, 2009 at 07:57:36PM +0700, Sthu Deus wrote: > Meaning that all packets come to and back from - only for/from the > v-server. That the home machine will not be processing the packets. In a way, that isn't possible because there has to be at least one physical network card which wou

Re: Vserver networking: to make a forward only.

2009-07-15 Thread Sthu Deus
Thank You for Your time and answer, lee: > Unplugging the network connection is the best way to achieve that. How will v-server will get network then? > > - but only affecting those in vserver. > ? Meaning that all packets come to and back from - only for/from the v-server. That the home mach

Re: Vserver networking: to make a forward only.

2009-07-13 Thread lee
On Mon, Jul 13, 2009 at 09:23:13PM +0700, Sthu Deus wrote: > Good day. > > I want to make a well closed machine running vservers - that is I want to make > such a forwarding that any communications will be off the machine (for the > security reasons) Unplugging the network connection is the best

Vserver networking: to make a forward only.

2009-07-13 Thread Sthu Deus
Good day. I want to make a well closed machine running vservers - that is I want to make such a forwarding that any communications will be off the machine (for the security reasons) - but only affecting those in vserver. Thus far I have on real machine: *filter :INPUT ACCEPT :FORWARD DROP :OUTPU