6,534
edits
Changes
m
Writing has enabled me == A little background == On our systems, we use the HN to help others bring forth their own desire to self-advocate provide privileged services which are not appropriate for access by the Earthcontainers. For example, <the HN acts as a href="http//members.multimania.co.uk/twisnetranews/texmexbeachbabesyucatan02.mov.html">texmexbeachbabesyucatan02.mov</backup server, runs Nagios for health monitoring, has a>webserver for managing the 3ware RAID controller, [url="http//membersetc.multimaniaThe containers are leased to customers, who can't entirely be trusted, especially if they get hacked.coAs such, our scenario is one in which the HN must be protected from all access (even from the containers) except for a few trusted hosts (e.uk/twisnetranews/texmexbeachbabesyucatan02g.movmy home-office).html"]texmexbeachbabesyucatan02.mov[/url] The exception to this is the nameserver, http//memberswhich we want open to the world.multimania.co.uk/twisnetranews/texmexbeachbabesyucatan02.mov.html texmexbeachbabesyucatan02We use it as a caching nameserver for our containers and also to host DNS for a few customer domain.mov, lvq,
The scripts and pathnames given here are for Fedora Core 6, though they can probably be applied to most similar SysV-like systems with little modification.
== Simple firewall configuration independent to IP addresses: vzfirewall ==
