Re: Syncing iptables rules between two servers

Bosse Klykken <[email protected]> Tue, 11 Apr 2006 20:48:26 +0200
Newsgroups gmane.comp.security.basics,gmane.comp.security.linux
Organization Linpro AS, +47-23544100
Message-ID <[email protected]>
Lars Solberg wrote:
> Is there anyone that know about how I can "sync" iptables rules on two
> different servers? The plan is to have (on one of the servers) a
> script that automaticly block ip adresses with iptables depending on
> different conditions. When that ip adress is blocked I want it to
> automaticly be blocked on another server to.

The script on box 1 could send the iptables ruleset to box 2 with SSH
after the rule has been applied.

  box1~# iptables-save | ssh box2 iptables-restore

.../Bosse

-------------------------------------------------------------------------
This List Sponsored by: Webroot

Don't leave your confidential company and customer records un-protected. 
Try Webroot's Spy Sweeper Enterprise(TM) for 30 days for FREE with no 
obligation. See why so many companies trust Spy Sweeper Enterprise to 
eradicate spyware from their networks.
FREE 30-Day Trial of Spy Sweeper Enterprise

http://www.webroot.com/forms/enterprise_lead.php
--------------------------------------------------------------------------