Re: problem making my director the point of entry (firewall)
Marc Swanson <[email protected]> Wed, 31 Dec 2008 15:51:41 -0500
| Newsgroups | gmane.linux.highavailability.ultramonkey |
|---|---|
| Message-ID | <[email protected]> |
Hi Simon, I installed 2.6.28 but still no luck. I can't call up a virtual ip service from the director itself. As before, it works from an unrelated machine on the private switch. I am getting something interesting though when I try to setup forwarding from the external IP of the director to the virtual IP for http/https (my virtualized services). An entry shows up in dmesg: ip_rt_bug: 71.xxx.xxx.xxx -> 192.168.3.200, eth0 where 71.xxx.xxx.xxx is my external IP on my workstation where I tried to open a browser to the public IP of the director, and 192.168.3.200 is the internal virtual ip. For testing here is the "open" firewall with just the forwarding I tried without luck (where I get the ip_rt_bug message): > iptables -t nat -L Chain PREROUTING (policy ACCEPT) target prot opt source destination DNAT tcp -- anywhere anywhere tcp dpt:http to:192.168.3.200:80 Chain POSTROUTING (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination Suggestions on where to go from here? I appreciate the help very much. Hope you have a good new year! -- ----------------------------- Marc Swanson M Swanson Consulting LLC Email: [email protected] Phone: (603)413-6833 Cell: (603)512-1267 Fax: (603)316-0372 http://www.mswanson.com _______________________________________________ Ultramonkey-users mailing list [email protected] http://lists.vergenet.net/listinfo/ultramonkey-users