LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 07-11-2008, 11:51 AM   #1
designator
Member
 
Registered: Jun 2003
Location: California, USA
Distribution: OpenSUSE Tumbleweed
Posts: 219

Rep: Reputation: 37
Angry VMware trusted interface


I'm trying to set the virtual interface vmnet1 as a trusted interface so that guest and host can communicate with each other without a firewall.

Both guest and host are running CentOS 5.2

system-config-securitylevel-tui doesn't show vmnet1 as one of the interfaces so I can't just tick a box there.

Does anyone know how to permanently set vmnet1 as a trusted interface on CentOS?

I've tried these, but neither worked:
Code:
iptables -A INPUT -i vmnet1 -j ACCEPT
and
iptables -A RH-Firewall-1-INPUT -i vmnet1 -j ACCEPT
Here's what iptables -L shows:
Code:
iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination
RH-Firewall-1-INPUT  all  --  anywhere             anywhere

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
RH-Firewall-1-INPUT  all  --  anywhere             anywhere

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Chain RH-Firewall-1-INPUT (2 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
ACCEPT     icmp --  anywhere             anywhere            icmp any
ACCEPT     esp  --  anywhere             anywhere
ACCEPT     ah   --  anywhere             anywhere
ACCEPT     udp  --  anywhere             224.0.0.251         udp dpt:mdns
ACCEPT     udp  --  anywhere             anywhere            udp dpt:ipp
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ipp
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:ssh
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:ies-lm
ACCEPT     tcp  --  anywhere             anywhere            state NEW tcp dpt:ideafarm-chat
REJECT     all  --  anywhere             anywhere            reject-with icmp-host-prohibited
ACCEPT     all  --  anywhere             anywhere
Any suggestions welcome.
 
Old 07-11-2008, 03:50 PM   #2
saldon
LQ Newbie
 
Registered: Jun 2008
Location: USA
Distribution: Ubuntu, OpenSUSE, RedHat
Posts: 29

Rep: Reputation: 1
Well, Linux can't "see" vmnet1 because that exists only in VMware. When you setup VMware you created a virtual network as well. You need to approach this as though you're connecting two different physical machines. Add the entries to your firewall config based on the IP address of the host and guest.
 
Old 07-14-2008, 01:20 PM   #3
designator
Member
 
Registered: Jun 2003
Location: California, USA
Distribution: OpenSUSE Tumbleweed
Posts: 219

Original Poster
Rep: Reputation: 37
Once you explained it, it made perfect sense :-) Thanks a lot.

For anyone else with a similar problem, the command I had to use was:
Code:
iptables -I RH-Firewall-1-INPUT 1 -s 192.168.16.0/24 -j ACCEPT
Where 192.168.16.0/24 is a host-only interface vmware server created and RH-Firewall-1-INPUT is the default chain CentOS 5.2 created.

After I ran that and made sure it works, I ran
Code:
iptables-save > /etc/sysconfig/iptables
to make the changes permanent.

Last edited by designator; 07-14-2008 at 03:46 PM. Reason: Forgot the location where to save iptables
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Interface for reiserfs in vmware badradiation Linux - Software 1 09-27-2006 02:22 PM
VMware ate my network interface!! RBJohns Linux - Software 4 05-19-2005 04:42 PM
Network Interface Failed booting RH9 on Vmware 4.0 linux618 Linux - Networking 6 03-01-2004 09:57 AM
trusted user uerden Linux - Security 1 02-16-2004 03:52 PM
trusted connections dominant Linux - Security 2 02-02-2004 05:07 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 06:26 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration