From: Quentin Smith <quentin@mit.edu>
Date: Wed, 9 Mar 2011 23:18:14 +0000 (-0500)
Subject: Don't enable proxy arp on every interface, just the public one
X-Git-Tag: 0.0.32^0
X-Git-Url: http://xvm.mit.edu/gitweb/invirt/packages/invirt-xen-config.git/commitdiff_plain/8d2423af0d1cb2771a6aea432aeeceb52399fa2e

Don't enable proxy arp on every interface, just the public one
---

diff --git a/debian/changelog b/debian/changelog
index 693f2de..e9318d3 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+invirt-xen-config (0.0.32) unstable; urgency=low
+
+  * Don't enable proxy arp on every interface, just the public one (fixes
+    problems with reachability on the backend network!)
+
+ -- Quentin Smith <quentin@mit.edu>  Wed, 09 Mar 2011 18:18:06 -0500
+
 invirt-xen-config (0.0.31) unstable; urgency=low
 
   * Only run arpspoof when NICs are brought online (this potentially fixes
diff --git a/debian/invirt-xen-config.init b/debian/invirt-xen-config.init
index f5e29c3..5741943 100755
--- a/debian/invirt-xen-config.init
+++ b/debian/invirt-xen-config.init
@@ -23,7 +23,7 @@ do_startup() {
     gen_files
     
     echo 1 >/proc/sys/net/ipv4/ip_forward
-    for i in all default; do
+    for i in $(invirt-getconf xen.iface) default; do
         echo 1 >/proc/sys/net/ipv4/conf/$i/rp_filter
         echo 1 >/proc/sys/net/ipv4/conf/$i/proxy_arp
     done