[fedora-virt] Routing only works in one direction

[Richard W.M. Jones]

On Sat, Sep 24, 2011 at 02:13:57AM +1000, Philip Rhoades wrote:
> Rich,
> 
> 
> On 2011-09-24 00:13, Richard W.M. Jones wrote:
> >On Fri, Sep 23, 2011 at 12:43:12AM +1000, Philip Rhoades wrote:
> >>People,
> >>
> >>I have been installing virtual machines for a while on a Fedora 14
> >>x86_64 system (the most recent one was F16 Alpha i686) and I
> >>have always
> >>managed to be able to test what I wanted to but ssh-ing from the
> >>host to
> >>the virtual machines has never worked (it always works the other way
> >>around).  I get:
> >>
> >>   ssh: connect to host 192.168.122.139 port 22: No route to host
> >>
> >>ifconfig shows:
> >>
> >>   virbr0    Link encap:Ethernet  HWaddr FE:54:00:9F:96:2F
> >>             inet addr:192.168.122.1  Bcast:192.168.122.255
> >>Mask:255.255.255.0
> >>
> >>route shows:
> >>
> >>   192.168.122.0   *               255.255.255.0   U     0      0
> >>0 virbr0
> >>
> >>so why the error message?
> >
> >There's not enough information here to answer the question,
> 
> 
> What other info is needed?

I'd want to see the *full* output from:

 - ifconfig -a

 - netstat -rn

 - iptables -L -n

 - brctl show

Plus maybe try tcpdump'ing the connection?

> >but I
> >would hazard a guess that the problem is because you've overwritten
> >libvirtd's own firewall rules.  A well-known way of overwriting them
> >is to restart the firewall after libvirtd has started.
> 
> 
> I do occasionally manually restart iptables - so I rebooted just in
> case - I see processes:
[...]

The iptables output should help here because it will tell you if the
libvirt rules are still there.

Rich.

-- 
Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones
Read my programming blog: http://rwmj.wordpress.com
Fedora now supports 80 OCaml packages (the OPEN alternative to F#)
http://cocan.org/getting_started_with_ocaml_on_red_hat_and_fedora