Fedora Networking :: Block Virtual Machines Access To Server
Nov 10, 2009
in my network, users has total access to their PCs, so theres a problem to filter (URL, ports,etc.) their virtual machines installed (they can assign self any IP, e.g.)
Id thought about use the MAC prefix in VMware VMs (00:0c:29:*), but i can only found a way through DHCP, and this isn't a good solution (they can assign a static IP to workaround...)
It will be better using firewall (iptables), but I don't found the way to add rules based in MACs with wildcards.
give a reference to the definition of 'isolated network' as used in the Virtual Machine Manager? I have virtual machines that I do not want to have access to the host, I thought 'isolated network' did this but the VM's can ping the host. If (probably) I am wrong, how can I create an network that can not see anything else but what is also on the same network? The host and the isolated network are 192. and 172. The virtual bridge is not connected (or so it says) to any physical device.
I've installed VirtualBox OSE and have a couple of guest OS setup. I am running Ubuntu 11.04 and VBOSE version 4.x (the most current). Now this installs the guest OS virtual harddrives to a folder in my home directory. How do I get other users on the same host machine access to those virtual machines within VB? Currently logging in as another user and going to Applications/Accessories/VirtualBox OSE ... the list of guest machines is empty save of course on my login.
I only have one IP adress to access the server. But the server will host 3 web sites and I want them to be hosted in a vm. So, I want to setup 3 virtual machines to do it and use apache reverse proxy and vhosts to redirect the domain requested to the right vm. Now. I understand the concept, but I am not an expert to set that up....
I have an openSUSE 11.3 server. So, I have to set a virtual machine server, is that right? I have been told that I cannot do it with VMware server in oS 11.3. Can I use virtualbox for this? I only have to install virtual box? Is there a special version to install? Once the virtual machine server is install, is it trivial to create 3 vm? So, I want to know wich are the steps I have to take to set that up.
I cant get my linux server ( centos5 ) with virtualbox run 2 virtual machines in headless mode. Only one machine gets network connection. Can anyone tell me how to make 2 or more virtual machines work with 1 eth-port in headless mode using virtualbox ?
finaly got my Centos host ready and configured,i have Vmware installed inside the Centos Host.how can i allow to RDP to the Virtual machines inside th Centos,
I used to use server 64, and it handled memory well with Jaunty and Karmic but with Lucid the memory usage is always high and can't run virtual machines.
First off I am new to Linux and fairly new to working in Networking and Server config's. I have been using Windows for years and have been learning Windows Server 2003 as I have a Technet account, I can get any MS software. I would like to learn Linux and use this as my Server environment. My project looks like this: I have a Quad core, 8gb machine. I want to install a distro of Linux (server or desktop) and run Virtual Machines on it.
My perferred way would be to use Virtual Box but I could use VMware products if that was better. I would like to run WS2003, WS2008, Linux Distro and anything else that will run in a VM. I can figure out that part pretty easily. I want the Linux host machine to run all these VM's and access and use them on my MAC remotely. I have done some research on ESXi as well, but I don't think my Hardware is going to support that. My exact PC spec's are:
AMD x4 940 8gb DDR2 Gigabyte MA770-UD3 2 Velicoraptor Drives GTX 260 I will be dual booting this machine on one of the Raptors for gaming as well.
I setup a private network from virtual machines and one of the machines is the DHCP server for the group. I want to specify a next-server for the DHCP server but I'm having trouble connecting to any of the machines that I lease IPs to. I'm just trying to do a simple ping/ssh to 10.0.0.252 (a machine with a lease) but it doesn't seem to respond. I'm assuming I need to be able to connect to my next-server but maybe I'm wrong.
I am new to virtual machines in general, and currently playing with the XEN-based VM in CentOS 5.5. Question: if neither virt-manager nor virsh (using "virsh edit <guest name>" and changing the name in the XML file) are designed to actually change a guest's name...then what is the recommended procedure for doing this?
I've been learning linux for a while now with half an eye on making a career out of it in future. One sizeable gap in my knowledge at the moment is networking. Is it feasible/desirable to set up a network of virtual machines to use as an environment to learn networking? My budget is non-existent so I was hoping to be able to get a basic understanding of the principles from installing a few desktops, a virtual gateway etc on VMware workstation on my laptop, and doing a lot of reading online.
Is this feasible, or will I just end up learning about virtual networks instead of real ones? Also how much power would be required, because my 3GB RAM lappy has just gone bang and all I have now is a (new) 1GB RAM lappy.
Server is running a stripped down version of CentOS 5.3 (64-bit), running only the built-in Xen Virtualization Environment. There is no other services running on the server (not samba, httpd, sendmail, cups... nothing except Xen) We've created several virtual machines, and as long as we don't start a fourth virtual machine everything runs smoothly (impresive hardware).
Each virtual server is configured as:
PARAVIRTUALIZED 1 Virtual CPU 1 GB RAM
However, 5 minutes or so after starting a fourth virtual machine, the entire host server crashes and restarts itself. Are we limited by the number of cores on the host machine CPU (4 cores)? 1 for the host and 3 for virtual machines? We've read in forums about other Xen setups running up to 11 virtual machines on less powerful hardware? (a dual core server). Should we be using FULLY VIRTUALIZED virtual machines instead? Is the number of XEN virtual machines in fact limited by the number of cores? If so, how can someone run several virtual machines on a single core host?
By the way, we were replacing a previous Dell Server (Poweredge 2600 with 512 MB Ram and a single Xeon single core processor running Open Virtuozzo). We were able to run up to 16 virtual machines at the same time. Of course none of the machines endured hard work (testing environments, etc). But hey, my point is that we expected to get a much higher number of virtual machines on this new hardware.
I've run into a problem gathering usage for my xen virtual systems. With my old model I used to gather all network usage via my cisco devices using the the counters for each port. Each system had it's own port on the switch, and I tracked network usage accordingly. Now that I'm using xen for virtual systems, and multiple vm's share the same switch port, i'm not exactly sure what my best option is for tracking usage.
I thought I may be able to setup vlans on the switch, and bind each vm to a different vlan using vconfig... but it seems like there has to be a better solution than that.
I'm working on a side project where I would like to install three ubuntu server systems,each with only one task.So server0 would be the apache server, server1 would be the database and server2 would be the file server.which key terms I should be researching?
I have an HP Compaq nx6125 laptop, which has an AMD Turion 64 2200MHz processor, running Windows 7 Ultimate. I have installed the VMware Workstation 6.5.2 [full] trial and am attempting to install Fedora 11 on a virtual machine.
I understand that the Turion processor is a 64 bit processor, so I downloaded the Fedora 11 x86_64 DVD iso image.
First I have to create a VMware virtual machine (VM) and choose a version for it. If I choose a version that is any of the 64 bit options (for example, "Other Linux 2.6.x kernel 64-bit", since there are specific options for RHEL but not for Fedora), I get an error message the moment I try to power on the VM and start the install, saying "The buslogic SCSI adapter is not supported for 64-bit guests in this release [...]". Then the VM just shuts down.
I guess this laptop does have a SCSI bus, but my disks are IDE and as far as I can see (System Information) the SCSI bus is not used (?).
On the other hand, if the VM I create is any of the 32-bit option versions, I get what seems to be just a warning, saying that I'm running a 64-bit guest OS (Fedora 11) on a virtual machine configured to run a 32-bit OS, and suggesting I change this to ensure the 64-bit guest OS will function correctly. What would be the risks / downsides of forcing the install anyways?
I will also ask for help on the VMware side, too, and it's not my intention to turn this into a VMware discussion, but I'm just wondering if anybody on the forum has worked with this combination (VMware 6.5.2 and Fedora 11 running within it, preferrable on an HP Compaq 6125 running Windows 7 Ultimate) ? If so, I'd really appreciate some feedback / pointers.
I used to work a lot with Linux back in the days of RH5.2, and it's been a while, plus I'm new to the virtual machine world, so bear with me here.
I have a home server that I have been running for some years and am constantly tweaking / playing with it resulting in numerous reinstalls (and upsetting the wife!). It does nothing critical but I use it mainly for:
backing up my laptop files XBMC ZoneMinder
Due to the number of times that I manage to break it, I have now thought about setting it up as a base system but with virtual machines looking after the seperate 'components'. The machine is an AMD Athlon 64 X2 4200+ with 2Gb RAM. First of all do you think it is powerful enough to run XBMC and ZM in seperate virtual machines? - I appreciate the more RAM the better but at the moment I am sticking to 2Gb.
I was also wondering what sort of issues may arise for the audio and video areas I will be using. XBMC currently outputs through an HDMI cable to the TV and ZM recieves video signals through a seperate video card. ( I have had my concerns in the past that there have been conflicts in the way I have set things up!). I have read a number of guides about setting a system up with virtual machines but not really found any articles about the practicalities of using such a set up at home. before I commit and spend a week pulling my hair out trying to get it all to work!
I would like to configure and SAN disk. But I do not have a physical SAN disk. Is it possible to create and configure a Virtual SAN disk and work on it with virtual machines?I have around 400GB of space in my Laptop.
Is anyone familiar with how to correct a glitch with Qemu-KVM that prevents virtual machines (Windows Server guests) from starting after the Linux host has been rebooted? It gives an error constructing a domain in /dev/sr0 because of /usr/share/virt-manager/virtManager/engine.py line 493 [run_domain vm_startup], /usr/share/virt-manager/virtManager/domain.py line 573 [startup self.vm create()] and /usr/lib/python2.6/site-packages/libvirt.py line 287 [create if ret=-1 raise libvirtError].
How does one access a Virtual Box installed Fedora system? I'd like to be able to ssh into this system (locally) but I've no idea how to do this. There is an ip address of 10.0.2.15. Ping doesn't work (ping 10.0.2.15). Should I just go ahead and assign a 192. address to this box before I go any further? It would seem that at this point the system isn't actually a part of my local network and I don't imagine it would be unless it has a 192 address.
I installed a server called Oracle VM Manager, which is actually a web based application to manage Oracle VM server.After successfully installed everything, it suppose to be access by browser using But strange thing is, I can see web pages from the server itself with but any other machines to access it with hostname or ip address all failed.
I am having a server in a corporate data centre. There are some virtual machines running on it.The main server is accessible from internet via SSH. There are some people who within the lan access the virtual machines whose IPs on LAN are
from internet only one host is allowed SSH. This machine has public IP and is also connected to LAN on the IP 192.168.1.50. Tunnel is not allowed on our network.So now I am came across a solution as explained on this link. I am not clear with on which machine .ssh/config file I add following
Code: Host securehost.example.com ProxyCommand ssh user1@insidemachine.com nc %h %p Should above be done on gateway where public IP and ssh is allowed or client on internet who has to login. Do I need to create separate accounts on the gateway also so that the users who can SSH to gateway then are forwarded to inside machines? Or one account on gateway is sufficient for different people logging in via internet to my gateway and then forwarded to internal machine?
Then do I need to create an account user1 on the gateway also?
1) What is the correct syntax for ProxyCommand on gateway's .ssh/config should I use
Code: ProxyCommand ssh user1@inside.machine nc %h %p or I should use Code: ProxyCommand ssh user1@gateway.com in nc %h %p
2) Should I create new user accounts on gateway also which exist on internal machine?
Ive managed to install samba, I've shared a folder. I can access from a Windows 7 machine via \ubuntupublic. I can put files in the folder form the ubuntu machine and edit them on the windows box. I can put files in the folder/share from the Windows box but then I cannot edit them on the Ubuntu machine (they are read only and have a "Lock" over them). I can fix this by going to the properties of the file/folder in Windows and manually assigning "Everybody" full control (then the lock disappears and all is well.) I want read/write access to all the folders contents from both machines all the time (security is NOT a concern I WANT the permissions wide open) what am I doing wrong?
I have a few mail servers, a mail log server and a web server running on Centos 5. Now I have a task: to avoid accidental crashes on the production servers while installing updates, my boss asked me to do clones (these clones will all be VMware virtual machines) of the servers (EXCLUDING the actual e-mails and log contents) and then to run those clones on VMWare Server. This way, first I will install and test updates on the clones and - if they will be running without crashes - I will apply the updates on the real production servers themselves.
I have already installed VMWare Server 2.0 I have a few questions: How do I build the virtual machines to exclude the actual mail files and mail logs? Can I use VMware Converter for this purpose, or do I have to use another program? How do I actually do this cloning? Is there a tutorial on how to do this?
I have to administer a few mail servers, a mail log server, 4 nameservers and a web server -all running on Centos 5 server distributions. Now I have a task: to avoid accidental crashes on the production servers while installing updates, my boss asked me to do clones (these clones will all be VMware virtual machines) of the servers (EXCLUDING the actual e-mails and mail log contents) and then to run those clones on VMWare Server. This way, first I will install and test updates on the clones and - if they will be running without crashes - I will apply the updates on the real production servers themselves. I have already installed VMWare Server 2.0 I have a few questions:
- How do I build the virtual machines to exclude the actual mail files and mail logs? Can I use VMware Converter for this purpose, or do I have to use another program? - How do I actually do this cloning? Is there a tutorial on how to do this?
My new HP mini running Ubuntu sees my HP notebook running Vista,my Compaq desktop running Vista, and my HP desktop running XP as computers belonging to my workgroup, but I can only access my files on the XP machine. The mini and the notebook are wireless and the desktops connect to the router by cable.
All of the computers connect through the router to the DSL modem, and each of them connect to the HP wireless printer. None of the other computers see my mini as belonging to my workgroup, specifically including my XP computer. Figure that it is likely normal that I cannot with my mini open files that I find on my XP, but have to copy and paste them to my mini or one of the flash drives I use with it before I can open them.
I understand I have described a "well known problem" caused by a non standard sequence in Vista, that can be obviated by a fix to the login sequence that can be made to the linux code in my mini so that it will recognize and perform the login (user name and password) that is required when a Vista machine is encountered.
But I'm in over my head, unable to even find the command line on my mini.
I run my own home server using OpenSuse 11.1, everything is setup using apache, php, etc etc, and it all works perfect, but now I need to use my own email server for the use of Dolphin social networking software, so that when someone registers, the email server sends out registration confirmation emails, so I set up postfix, yeah right!!!, even though I followed all instructions to set postfix as a closed relay, a test done at mxtoolbox site still said it was an open relay, but while I was trying to set up postfix, my access to the server slowed down, and my servers drive light was constantly active,,, so when I look at the mail queue, I saw 4000+ emails, all from japan, (hinen.net), so I promptly shut down postfix and use postsuper -d ALL in the command console to delete the queue, but no matter how I try, I couldn't configure postfix as a closed relay,,, so I uninstalled it and installed sendmail, and using webmin, I could use a spam list and block the domain, now, sendmail's test at mxtools show as a closed relay, I can't even send out a test email using smtp auth, but disabling auth, I can, but now my IP is blocked at spam cop, and spamhaus,,, gmail server say my IP is not authorized to send to their servers, but to use my ISP relay instead,,, but my ISP doesn't have a relay,,hence the need to run my own email server.
My home server uses double layer firewall, a hardware firewall between the internet and the server, and a software firewall on the server, and I only allow the ports I need, IE, 80 = http, 443 = https, 20/21 = ftp, 25 = smtp, 110 = pop3. and that's all, but any other internal access from my workstation to the server, using ssh, I only open the ports on the server firewall. If someone here has a great deal of knowledge on sendmail, and can set up a an M4 (linux.mc) config file for me, it would be much appreciated. What I would like my email server to do, is to only allow the sending of emails from inside it's own server system,, ie, when a php script sends an email to the server, then the email server would let it through, but anything else, outside the local network is ignored.
I need to make a script in which I want to block an ip when its access on a web server exceeds than certain number e.g., 5000 for a particular time period, let's say for 6 hours or 12. If any ip exceeds that limit, it should automatically be blocked. I also want to run this script on regular intervals in 24 hours for atleast 2 times.
