[CentOS-virt] firewall best practice on dom-0

Sun Jul 13 14:44:14 UTC 2008
John Thomas <gmane-2006-04-16 at jt-socal.com>

Kai Schaetzl wrote:
> What's best practice on Dom-0, what do you do? Can I restrict the 
> forwarding, in which way?

I use vmware, not XEN, but I think everything is the same, as if you 
have physical machines.

I use shorewall everywhere and find it great.
http://shorewall.net

rpms: http://www.invoca.ch/pub/packages/shorewall/

HTH

-- 
Sincerely,
John Thomas