From: Jacques Gelinas (jack_at_solucorp.qc.ca)
Date: Mon 25 Feb 2002 - 22:19:20 GMT
On Wed, 20 Feb 2002 23:58:59 -0500, lance wrote
> On Wed, 20 Feb 2002, Jacques Gelinas wrote:
> Aha thanks for clearing that up - have you thoughts on how to segregate
> firewalling between the different vservers ??
>
> Could it be done with a per instance chain (or table) that the vserver can
> modify ??
This is tricky, but something may be done using an extension to the rebootmgr
service (maybe). The idea would be for the vserver to supply to the root
server some partial rules (what it accepts, what it denies and so on). The rules
would be completed (using the vserver IP number) and the firewall would
be regenerated.
---------------------------------------------------------
Jacques Gelinas <jack_at_solucorp.qc.ca>
vserver: run general purpose virtual servers on one box, full speed!
http://www.solucorp.qc.ca/miscprj/s_context.hc