Re: [kvm-devel] howto set up a virtual firewall?

2008-02-25 Thread Kurt Neufeld
Kurt Neufeld kneufeld at burgundywall.com writes: It turns out I did have everything correctly configured but it still doesn't work. The problem is that I cannot get a DHCP address on my vm. Almost correctly. Some general questions, should br0 be up or down? What should my vm MAC be? The

[kvm-devel] howto set up a virtual firewall?

2008-02-20 Thread Kurt Neufeld
Hey there, I've searched high and low but can't find an answer to my problem and I find it hard to believe that I'm the only person that wants to do this. I would like to setup a virtual machine that is my firewall. So far I've got Shorewall setup in a virtual machine and the internal nic works

Re: [kvm-devel] howto set up a virtual firewall?

2008-02-20 Thread Avi Kivity
Kurt Neufeld wrote: Hey there, I've searched high and low but can't find an answer to my problem and I find it hard to believe that I'm the only person that wants to do this. I would like to setup a virtual machine that is my firewall. So far I've got Shorewall setup in a virtual machine

[kvm-devel] howto set up a virtual firewall?

2008-02-20 Thread Kurt Neufeld
Hey there, I've search high and low but can't find an answer to my problem and I find it hard to believe that I'm the only person that wants to do this. I would like to setup a virtual machine that is my firewall. So far I've got Shorewall setup in a virtual machine and the

Re: [kvm-devel] howto set up a virtual firewall?

2008-02-20 Thread Javier Guerra
On 2/20/08, Avi Kivity [EMAIL PROTECTED] wrote: Assuming you have eth0 on the host, tap0 on the host visible as eth0 in the guest, and tap1 in the host visible as eth1 in the guest, you can add a bridge between eth0 and tap0, and use tap1 as the nic in the host for IP (e.g. run 'dhclient

Re: [kvm-devel] howto set up a virtual firewall?

2008-02-20 Thread Kurt Neufeld
Avi Kivity wrote: Assuming you have eth0 on the host, tap0 on the host visible as eth0 in the guest, and tap1 in the host visible as eth1 in the guest, you can add a bridge between eth0 and tap0, and use tap1 as the nic in the host for IP (e.g. run 'dhclient tap1' to obtain an internal