<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-15">
</head>
<body bgcolor="#ffffff" text="#000000">
<meta http-equiv="content-type" content="text/html;
charset=ISO-8859-15">
Hi,<br>
<br>
I'm not sure but I think I suffer under the same problem with a bit
different setup with squeeze testing and xen 4.0rc5.<br>
In fact I'm using bridges in the dom0 and the connections to the
domU get lost sporadically.<br>
In don't see where's a solution to the problem... Is it now a bug?
When it's an iptables bug, where's the corresponding bug in the
iptables bugtracker and what exactly is iptables doing wrong.<br>
You stated "...but as the syslog message clearly
indicates this rule works perfectly when the traffic is bridged."<br>
I'm using bridges but it's not working obviously.<br>
<br>
/etc/network/interfaces<br>
auto br0<br>
allow-hotplug br0<br>
iface br0 inet static<br>
address 10.100.200.20<br>
netmask 255.255.255.0<br>
dns-nameservers 10.100.200.3<br>
gateway 10.100.200.3<br>
bridge_ports eth0<br>
<br>
allow-hotplug br1<br>
auto br1<br>
iface br1 inet manual<br>
bridge_ports eth1<br>
<br>
This is my logs:<br>
Sep 6 09:47:14 elise kernel: [71970.564974] br1: port 2(vif1.1)
entering disabled state<br>
Sep 6 09:47:14 elise kernel: [71970.578040] br1: port 2(vif1.1)
entering disabled state<br>
Sep 6 09:47:14 elise kernel: [71970.718785] physdev match: using
--physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for
non-bridged traffic is not supported anymore.<br>
Sep 6 09:47:14 elise kernel: [71970.718797] physdev match: using
--physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for
non-bridged traffic is not supported anymore.<br>
Sep 6 09:47:14 elise kernel: [71970.718803] physdev match: using
--physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for
non-bridged traffic is not supported anymore.<br>
Sep 6 09:47:14 elise kernel: [71970.724864] physdev match: using
--physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for
non-bridged traffic is not supported anymore.<br>
Sep 6 09:47:14 elise kernel: [71970.724874] physdev match: using
--physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for
non-bridged traffic is not supported anymore.<br>
Sep 6 09:47:15 elise kernel: [71970.871846] br0: port 2(vif1.0)
entering disabled state<br>
Sep 6 09:47:15 elise kernel: [71970.890073] br0: port 2(vif1.0)
entering disabled state<br>
Sep 6 09:47:15 elise kernel: [71971.010275] physdev match: using
--physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for
non-bridged traffic is not supported anymore.<br>
Sep 6 09:47:15 elise kernel: [71971.010286] physdev match: using
--physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for
non-bridged traffic is not supported anymore.<br>
Sep 6 09:47:15 elise kernel: [71971.016391] physdev match: using
--physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for
non-bridged traffic is not supported anymore.<br>
Sep 6 09:47:17 elise kernel: [71972.912040] device vif3.0 entered
promiscuous mode<br>
Sep 6 09:47:17 elise kernel: [71972.915898] br0: port 2(vif3.0)
entering learning state<br>
Sep 6 09:47:17 elise kernel: [71972.948656] physdev match: using
--physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for
non-bridged traffic is not supported anymore.<br>
Sep 6 09:47:17 elise kernel: [71972.953266] physdev match: using
--physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for
non-bridged traffic is not supported anymore.<br>
Sep 6 09:47:17 elise kernel: [71972.953273] physdev match: using
--physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for
non-bridged traffic is not supported anymore.<br>
Sep 6 09:47:17 elise kernel: [71972.986255] device vif3.1 entered
promiscuous mode<br>
Sep 6 09:47:17 elise kernel: [71972.990441] br1: port 2(vif3.1)
entering learning state<br>
Sep 6 09:47:17 elise kernel: [71973.011096] physdev match: using
--physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for
non-bridged traffic is not supported anymore.<br>
Sep 6 09:47:17 elise kernel: [71973.011102] physdev match: using
--physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for
non-bridged traffic is not supported anymore.<br>
Sep 6 09:47:17 elise kernel: [71973.016383] physdev match: using
--physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for
non-bridged traffic is not supported anymore.<br>
Sep 6 09:47:17 elise kernel: [71973.016392] physdev match: using
--physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for
non-bridged traffic is not supported anymore.<br>
Sep 6 09:47:17 elise kernel: [71973.016398] physdev match: using
--physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for
non-bridged traffic is not supported anymore.<br>
Sep 6 09:47:18 elise kernel: [71974.706987] blkback: ring-ref 8,
event-channel 8, protocol 1 (x86_64-abi)<br>
Sep 6 09:47:18 elise kernel: [71974.734701] blkback: ring-ref 9,
event-channel 9, protocol 1 (x86_64-abi)<br>
Sep 6 09:47:32 elise kernel: [71987.913527] br0: port 2(vif3.0)
entering forwarding state<br>
Sep 6 09:47:32 elise kernel: [71987.988031] br1: port 2(vif3.1)
entering forwarding state<br>
<br>
</body>
</html>