diff --git a/docs/XenMyWay-Routed.xml b/docs/XenMyWay-Routed.xml index bcf915dcd..d8e04ba3d 100644 --- a/docs/XenMyWay-Routed.xml +++ b/docs/XenMyWay-Routed.xml @@ -255,20 +255,20 @@ disk = [ 'phy:hda3,hda3,w' ] - The zones correspond to the Shorewall zones in the firewall Dom0 + The zones correspond to the Shorewall zones in the Dom0 configuration. Under some circumstances, UDP and/or TCP communication from a domU won't work for no obvious reason. That happened with the lists domain in my setup. Looking at - the IP traffic with tcpdump -nvvi eth1 in the - firewall domU showed that UDP packets - from the lists domU had incorrect - checksums. That problem was corrected by arranging for the following - command to be executed in the lists - domain when its eth0 device - was brought up: + the IP traffic with tcpdump -nvvi eth1 in dom0 + showed that UDP packets from the lists domU had incorrect checksums. That + problem was corrected by arranging for the following command to be + executed in the lists domain when its + eth0 device was brought + up: ethtool -K eth0 tx off @@ -296,16 +296,16 @@ fi
- Firewall Dom0 Configuration + Dom0 Shorewall Configuration - In the firewall Dom0, I run a conventional three-interface - firewall with Proxy ARP DMZ -- it is very similar to the firewall - described in the Shorewall Setup - Guide with the exception that I've added a fourth interface for - our wireless network. The firewall runs a routed OpenVPN server to provide roadwarrior access - for our two laptops and a bridged OpenVPN server for the wireless - network in our home. Here is the firewall's view of the network: + In Dom0, I run a conventional three-interface firewall with Proxy + ARP DMZ -- it is very similar to the firewall described in the Shorewall Setup Guide with the + exception that I've added a fourth interface for our wireless network. + The firewall runs a routed OpenVPN + server to provide roadwarrior access for our two laptops and a + bridged OpenVPN server for the wireless network in our home. Here is the + firewall's view of the network: