Syncing iptables rules between two servers
"Lars Solberg" <[email protected]> Sun, 9 Apr 2006 00:25:54 +0200
| Newsgroups | gmane.comp.security.linux,gmane.comp.security.basics |
|---|---|
| Message-ID | <[email protected]> |
Hi Is there anyone that know about how I can "sync" iptables rules on two different servers? The plan is to have (on one of the servers) a script that automaticly block ip adresses with iptables depending on different conditions. When that ip adress is blocked I want it to automaticly be blocked on another server to. One idea is to change the script that is adding the block rule to iptables to make it soo it can send the rule to the other server, but this is not an option, the iptables rules must be synced after the iptables rule have been added. Another idea is to get the iptables to use an sql database of some sort to load the rules, but I dont know how, and this whould be somehow ruining the whole thing of having a firewall if you make it dependent an sql server (i think).. But afterall, if this is possible this is option. Any ideas? Hope someone can help out.. Thanks Lars