Hi Gilboa, > Thanks for the link. I should have found it myself. > /me club myself in the head for not googling for it... /me joins you for all the times I have mad the same mistake :-) However I had to figure this on my own as Google was not of much help! > I can't seem to find documentation of TCP checksum failure and/or > security issues. > Is it still true for recent (2.6.16/17) kernels? The security issues are documented in the Xen Admin manual, PDF version. The last time I looked the online HTML version omits the whole pciback.hide thing, however it all still works as documented so it may or may not still apply (it does here). As for the checksuming issue, it still applies with 2.6.16-1.2133. I have not tried the 2.6.17 in testing as it requires a newer Xen package that had not hit testing this morning when I last checked. How did I find out? `tcpdump -v -v -n -i ethX' will show the problem, and your domU's will have issues communicating. I also found this documented by Tom Eastep at http://www.shorewall.net/XenMyWay.html It may also just be the way I am doing it, but the domU's using the PCI frontend driver *must* be up before other domU's or the will just fail talking to the network. I am still working on this one... Take care, Gawain -- fedora-devel-list mailing list fedora-devel-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-devel-list