Connect from remote host

[Andrés García]

Hi,

I configured a Fedora 12 beta system to accept connections from other 
system as explained
here:

http://virt-manager.et.redhat.com/page/RemoteDigest

To test it I connected using virt-manager in that system to itself and 
it worked, but when I tried
from a F11 virt-manager in another system it fails, I also tried 
connecting with virsh:

# virsh
virsh # connect qemu+tcp://192.168.0.43

It tells me there is no route to host despite being able to ping 
192.168.0.43.

Any ideas what could be wrong? F12 has a firewall I am not aware of?

Thanks,
Andres Garcia

[Cole Robinson]

On 11/05/2009 10:48 AM, Andrés García wrote:
> Hi,
>
> I configured a Fedora 12 beta system to accept connections from other 
> system as explained
> here:
>
> http://virt-manager.et.redhat.com/page/RemoteDigest
>
> To test it I connected using virt-manager in that system to itself and 
> it worked, but when I tried
> from a F11 virt-manager in another system it fails, I also tried 
> connecting with virsh:
>
> # virsh
> virsh # connect qemu+tcp://192.168.0.43

Does changing this to qemu+tcp://192.168.0.43/system make any difference?
> It tells me there is no route to host despite being able to ping 
> 192.168.0.43.

An actual copy of the error output could help. Also stick
LIBVIRT_DEBUG=1 before the virsh command.
> Any ideas what could be wrong? F12 has a firewall I am not aware of?

Turn it off with service iptables stop and see if it helps at all.
> Thanks,
> Andres Garcia

- Cole

[Andrés García]

Hi,
> Turn it off with service iptables stop and see if it helps at all.

That did it, sorry if this is a silly question but iptables have always 
been a bit of a mistery to
me, may I disable them without any ill effects? The office already has a 
firewall, so I don't really
need it for security reasons.

Thanks,
Andrés García

[Cole Robinson]

On 11/05/2009 12:04 PM, Andrés García wrote:
> Hi,
> > Turn it off with service iptables stop and see if it helps at all.
>
> That did it, sorry if this is a silly question but iptables have always 
> been a bit of a mistery to
> me, may I disable them without any ill effects? The office already has a 
> firewall, so I don't really
> need it for security reasons.

There are potential security implications, but if you are using a
desktop machine (as in, this isn't a production server) already behind a
corporate firewall, you probably have nothing to worry about.

- Cole