Whishlist: add (iptables?) firewall for security reasons!

[To-M]

Check if the NIC has the AUX enabled for it.

[To-M]

Engineers can make a small update to disable the SMB, we place the no guest access as an option. You may need to place a firewall for the other ports.

[Laxity]

Engineers can make a small update to disable the SMB, we place the no guest access as an option. You may need to place a firewall for the other ports.

Hi Todd,

I think this is a good start.
FYI: I had failover disabled completely when I wanted to disable the NIC, it still said it would disable failover?

And yes, I will rent a "shared" firewall which the guys at the datacenter offer.

Thanks (as always) for your nice support!

Philipp

[To-M]

I sent an email to you with a small update to turn off SMB.

[Laxity]

I have installed an "Endian Firewall" as a seperate virtual machine ( http://www.endian.com/en/community/ ) which NATs two ports to the private IPs of the DSS machines on port 443
Then I disabled the NIC which was connected to the internet.

If the firewall virtual machine or even all XenServers should fail I can still re-enable the NIC to the internet using IPMI

So I do not have to rent a hardware firewall at the data center