RE: UM with Firewall -Marking

John Joseph <[email protected]> Sat, 19 Aug 2006 06:54:20 +0100 (BST)
Newsgroups gmane.linux.highavailability.ultramonkey
Message-ID <[email protected]>
--- "Terry, Jason" <[email protected]> wrote:

> You may need to add a line into your
> /etc/sysconfig/iptables...
> 
> It's been so long I can't remember the command line
> way to add this.
> 
> However in my iptables file I have an entry similar
> to this
> -A PREROUTING -d 192.168.6.240 -j MARK --set-mark
> 0x1
> 
 
 I did it [ forget to mention in the last mail], and
it is not working 
        I suspect , it is the problem with the
ldirectord.cf
           thanks
               Joseph John 

> -----Original Message-----
> From: [email protected]
> [mailto:[email protected]] On
> Behalf Of John
> Joseph
> Sent: Thursday, August 17, 2006 3:51 AM
> To: UltraMonkey UMMailingList
> Subject: UM with Firewall -Marking 
> 
> Hi 
>     Thanks to the list , I was success in doing a
> test
> enviornment for  HA-LB 
> But when I tried to do  Firewall-Marked setup I am
> not
> able to set it up 
> my   
> ldirectord.cf contains
> 
> # Global Directives
> checktimeout=10
> checkinterval=2
> #fallback=127.0.0.1:80
> autoreload=no
> logfile="/var/log/ldirectord.log"
> logfile="local0"
> quiescent=yes
> 
> 
> # Note: persistancy needs to be turned on if FTP
> traffic is to handled
> #       using LVS-DR (gate) or LVS-TUN (ipip). This
> is
> not neccessary
> #       or LVS-NAT (masq).
> virtual=1
>         real=192.168.7.4:0 masq
>         real=192.168.7.5:0 masq
>         service=http
>         checkport=80
>         checktype=ping
>         request="real.html"
>         receive="Test"
>         scheduler=rr
>         #persistent=600
> 
>  my  
>   " ipvsadm -L -n"  show the weight of both real
> server as "1" 
> 
>      But when I try to browse for  192.168.6.240 , I
> cannot get the home page . I had used same setup
> from
> the ultra-monkey
>
(http://www.ultramonkey.org/3/topologies/ha-lb-eg-fwmark.html)
> I did some changes in  "/etc/ha.d/ldirectord.cf"
> which
> is given above 
>   
>         It works fine when I  do not use Firewall
> marking 
>           Guidance requested
>                             Joseph John 
> 
> 
> 		
>
___________________________________________________________
> 
> Try the all-new Yahoo! Mail. "The New Version is
> radically easier to
> use" - The Wall Street Journal 
> http://uk.docs.yahoo.com/nowyoucan.html
> 
> 
> -- 
> Ultra Monkey - http://www.ultramonkey.org/
> To UNSUBSCRIBE, email to [email protected], with
> a body:
> unsubscribe ultramonkey-users
> [email protected]
> where "[email protected]" is YOUR email
> address.
> 
> 
> 
> -- 
> Ultra Monkey - http://www.ultramonkey.org/
> To UNSUBSCRIBE, email to [email protected], with
> a body:
> unsubscribe ultramonkey-users
> [email protected]
> where "[email protected]" is YOUR email
> address.
> 
> 



		
___________________________________________________________ 
Now you can scan emails quickly with a reading pane. Get the new Yahoo! Mail. http://uk.docs.yahoo.com/nowyoucan.html


-- 
Ultra Monkey - http://www.ultramonkey.org/
To UNSUBSCRIBE, email to [email protected], with a body:
unsubscribe ultramonkey-users [email protected]
where "[email protected]" is YOUR email address.