Re: problem making my director the point of entry (firewall)

Marc Swanson <[email protected]> Wed, 31 Dec 2008 15:51:41 -0500
Newsgroups gmane.linux.highavailability.ultramonkey
Message-ID <[email protected]>
Hi Simon,

I installed 2.6.28 but still no luck.

I can't call up a virtual ip service from the director itself.  As 
before, it works from an unrelated machine on the private switch.  I am 
getting something interesting though when I try to setup forwarding from 
the external IP of the director to the virtual IP for http/https (my 
virtualized services).  An entry shows up in dmesg:

ip_rt_bug: 71.xxx.xxx.xxx -> 192.168.3.200, eth0

where 71.xxx.xxx.xxx is my external IP on my workstation where I tried 
to open a browser to the public IP of the director, and 192.168.3.200 is 
the internal virtual ip.

For testing here is the "open" firewall with just the forwarding I tried 
without luck (where I get the ip_rt_bug message):


 > iptables -t nat -L

Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination
DNAT       tcp  --  anywhere             anywhere            tcp 
dpt:http to:192.168.3.200:80

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination



Suggestions on where to go from here?  I appreciate the help very much. 
  Hope you have a good new year!


-- 
-----------------------------
Marc Swanson
M Swanson Consulting LLC

Email:  [email protected]
Phone:  (603)413-6833
Cell:   (603)512-1267
Fax:    (603)316-0372

http://www.mswanson.com
_______________________________________________
Ultramonkey-users mailing list
[email protected]
http://lists.vergenet.net/listinfo/ultramonkey-users