[Lxc-users] LXC and UFW

[Robert Pendell]

Well I figured out a solution to the issue.  This one I didn't really
see anywhere but I had to allow all traffic for the "bridge" nat
interface.  I guess it might not actually be a bridge since that's
what I was looking at.

sudo ufw allow in on lxcbr0 to any
sudo ufw allow out on lxcbr0 to any

Not the most elegant solution but it works.  If anyone has a better
suggestion I'm open for it.

Now then to move on to making the container directly externally
accessible without killing my network connectivity. :)
Robert Pendell
shinji at elite-systems.org
A perfect world is one of chaos.


On Sat, Aug 3, 2013 at 6:06 AM, Robert Pendell <shinji at elite-systems.org> wrote:
> Does anyone know of a way to get the two to cooperate with each other?
>  I've tried the solutions that I could find and so far none have
> seemed to have worked.  Here is my configuration.
>
> VPS running on Xen-PV using PV-Grub
> Ubuntu 12.04.2 running kernel 3.9.9 (from Ubuntu Kernel PPA)
> LXC installed from standard repos (version 0.7.5-3ubuntu67)
>
> I can start an LXC container ok but while UFW is enabled it is unable
> to pull an IP from dnsmasq.  When I shutdown UFW all works ok
> including network connectivity.  Can someone point out what I'm doing
> wrong?
>
> Thanks.
>
> Robert Pendell
> shinji at elite-systems.org
> A perfect world is one of chaos.