Re: [libvirt-users] http problem with (a particular url) and default (nat) networking

On 01/26/2013 07:30 PM, John McFarlane wrote: I just tried getting that file using wget from a RHEL6 guest on a Fedora 17 system with libvirt from "recent" git (within the last week), and it was able to retrieve the file with no problems and no delay. (the guest is connected using the "default" network, i.e. NAT and virbr0. I think there is something going on here beyond the iptables rules added by libvirt. Here are a few things I would try: 1) restart the libvirt daemon and see if the behavior changes. restarting libvirtd causes all libvirt-created iptables rules to be reloaded, so if the ordering had been messed up by some other application, that would be corrected. 2) run "tcpdump -i eth0 -n -vvv host 184.73.217.71" on the host before attempting the command in the guest (assuming the host's default route goes out eth0), then see if maybe there is an incoming packet with the SYN bit set or something (in my case, there wasn't anything like that - it was a vanilla tcp session on port 80) 3) at the same time, run "tcpdump -i virbr0 -vvv host 184.73.217.71" and look for differences between what you see on eth0 and what you see on virbr0 (possibly a packet isn't being NATed when it should be?) 4) along with looking at the filter table, look at the nat table: "iptables -S -t nat", maybe you'll see something revealing there.