http://bugzilla.novell.com/show_bug.cgi?id=569581 http://bugzilla.novell.com/show_bug.cgi?id=569581#c Charles Arnold changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jdouglas@novell.com AssignedTo|jdouglas@novell.com |jfehlig@novell.com -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=569581 http://bugzilla.novell.com/show_bug.cgi?id=569581#c2 --- Comment #2 from mail ignored <0.bugs.only.0@gmail.com> 2010-01-20 03:37:27 UTC --- (In reply to comment #1)

So I plan to patch vif-bridge in SuSE distros to remove handle_iptable call. Can you try this and report back? Thanks.

well that's simple enough. @ Dom0, in /etc/xen/scripts/vif-bridge, @94, --- handle_iptable +++ #handle_iptable then, reboot

dmesg | grep physdev

clearly removes the 'noise'. and, given the comments from the sysconfig maintainer, it seems that it is, indeed, a no longer required artifact. with this change, i've booted Dom0, as well as a bunch of multiply-bridged DomUs, and everything _seems_ OK. i'll report back if anything changes. thanks. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=569581 http://bugzilla.novell.com/show_bug.cgi?id=569581#c4 --- Comment #4 from mail ignored <0.bugs.only.0@gmail.com> 2010-01-20 05:50:48 UTC --- worth mentioning ... i do NOT use SuseFirewall on this box; it's disabled. for firewall in general i use shorewall. that said, it'd be useful to know what "all required rules needed to make bridged setup working" for use with other firewalls -- *especially* if some setup it lost by removing the handle_iptables call. are those rule requirements documented? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=569581 http://bugzilla.novell.com/show_bug.cgi?id=569581#c6 James Fehlig changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED --- Comment #6 from James Fehlig 2010-01-21 20:32:16 UTC --- Patch removing handle_iptable call from vif-bridge added to internal head and 11.2 repos. I also pushed the internal 11.2 repo to OBS in Virtualization:XEN:openSUSE-11.2 project https://build.opensuse.org/project/show?project=Virtualization%3AXEN%3AopenS... It contains all fixes, upstream patches, etc. for Xen 3.4.1 that we've collected since release of 11.2. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.