Re: ldirectord question regarding multiple ports
Brad Willson <[email protected]> Thu, 07 Sep 2006 06:40:17 -0700
| Newsgroups | gmane.linux.highavailability.ultramonkey |
|---|---|
| Organization | UW GeneTests |
| Message-ID | <[email protected]> |
Andersson Mattias wrote: > You will have to use port 0 (zero) that matches all ports, or use > firewall marks to define other combinations. > > /Mattias > > >> -----Original Message----- >> From: [email protected] >> > [mailto:ultramonkey-users- > >> [email protected]] On Behalf Of Brad Willson >> Sent: Wednesday, September 06, 2006 8:54 PM >> To: [email protected] >> Subject: ldirectord question regarding multiple ports >> >> Given the iptables rule: >> >> -A INPUT -s 192.xxx.xxx.xxx/255.xxx.xxx.0 -p tcp -m state --state NEW >> -m tcp --dport 50000:50100 -j ACCEPT >> >> Is it possible to match it up with a ldirectord.cf stanza like this: >> >> virtual=1xx.xxx.xxx.xxx:50000:50100 >> real=192.xxx.xxx.xxx:50000:50100 masq >> service=none >> persistent=600 >> protocol=tcp >> checkport=50000:50100 >> checktype=connect >> >> -- or -- is there some other way to define address ranges? >> >> -- >> Brad Willson, Sr. Computer Specialist >> UW GeneTests, UW Box: 358735 >> EM: [email protected] >> W: 206.221.4674, C: 425.891.2732 >> http://www.genetests.org >> >> >> -- >> Ultra Monkey - http://www.ultramonkey.org/ >> To UNSUBSCRIBE, email to [email protected], with a body: >> unsubscribe ultramonkey-users [email protected] >> where "[email protected]" is YOUR email address. >> >> >> > > > > Thanks, Mattias! I'll dig into the firewall mark solution, but I'm wondering...how does it play out if one stanza is defined as port 0 and another, say port 80, to the same real server(s). If one nullifies the other, I could reduce the size of my ldirectord.cf file by using port 0 more often. I'm specifically looking at backing up remote hosts with Amanda, so routing traffic back to 50000:50100 is the concern. From what I've read, ip_conntrack_amanda might be the better answer, instead of an iptables solution. -- Brad Willson, Sr. Computer Specialist UW GeneTests, UW Box: 358735 EM: [email protected] W: 206.221.4674, C: 425.891.2732 http://www.genetests.org -- Ultra Monkey - http://www.ultramonkey.org/ To UNSUBSCRIBE, email to [email protected], with a body: unsubscribe ultramonkey-users [email protected] where "[email protected]" is YOUR email address.