On 10/01/2012 03:14 AM, John M. Hackett wrote: > Hi, > > I hope this is not a stupid question! A client is currently running a > cluster of Proxmox1.6/OpenVZ servers making extensive use of > Shorewall on both the hosts and the containers. I am investigating > the possibility of upgrading to Proxmox v2.1. > > In the Shorewall.net documentation about using Shorewall with OpenVZ > there is a warning: > > "If you are running Debian Squeeze, Shorewall will not work in an > OpenVZ container. This is a Debian OpenVZ issue and not a Shorewall > issue." > > Proxmox v2.1 runs on Debian Squeeze (6.0). > > I assume this means that running the HOST on Debian Squeeze menas > that you cannot run Shorewall in a container - but will it still work > to protect the host or should it not be used at all. I am having > trouble accessing any containers externally (e.g. a squid container) > if I install Shorewall on the host (currently this is in a test > VirtualBox environment so not ideal). I'd like to know whether this > is because I've not got the setup correct or it just won't work!
I suspect that you have a Shorewall issue. The problem referred to in the article only affects Shorewall running in a container. > > Secondly - does this apply to the newer kernel (I'm running > 2.6.32-14-pve) and/or newest Debian (6.0.6). > We've had reports that the problem has been corrected in current Debian Squeeze OpenVZ kernels. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Got visibility? Most devs has no idea what their production app looks like. Find out how fast your code is with AppDynamics Lite. http://ad.doubleclick.net/clk;262219671;13503038;y? http://info.appdynamics.com/FreeJavaPerformanceDownload.html
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
