Don't enable proxy arp on every interface, just the public one

diff --git a/debian/changelog b/debian/changelog
index 693f2de..e9318d3 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+invirt-xen-config (0.0.32) unstable; urgency=low
+
+  * Don't enable proxy arp on every interface, just the public one (fixes
+    problems with reachability on the backend network!)
+
+ -- Quentin Smith <quentin@mit.edu>  Wed, 09 Mar 2011 18:18:06 -0500
+
 invirt-xen-config (0.0.31) unstable; urgency=low
 
   * Only run arpspoof when NICs are brought online (this potentially fixes

diff --git a/debian/invirt-xen-config.init b/debian/invirt-xen-config.init
index f5e29c3..5741943 100755 (executable)
--- a/debian/invirt-xen-config.init
+++ b/debian/invirt-xen-config.init
@@ -23,7 +23,7 @@ do_startup() {
     gen_files
     
     echo 1 >/proc/sys/net/ipv4/ip_forward
-    for i in all default; do
+    for i in $(invirt-getconf xen.iface) default; do
         echo 1 >/proc/sys/net/ipv4/conf/$i/rp_filter
         echo 1 >/proc/sys/net/ipv4/conf/$i/proxy_arp
     done