Have to restart iptables on failover?
"Peter J. Milanese" <[email protected]>
| Newsgroups | gmane.linux.redhat.piranha |
|---|---|
| Message-ID | <[email protected]> |
Greetings... For some reason, I cannot hit the realservers unless I reload the iptables configuration after failover.. Anyone run into this? The only pertinent line is the MASQ of the outbound interface... I have a few lines for ssh passthrough, but they shouldn't be causing any problems... -A PREROUTING -p tcp -m tcp -i eth3 --dport 1001 -j DNAT --to-destination 192.168.1.10:22 -A PREROUTING -p tcp -m tcp -i eth3 --dport 1002 -j DNAT --to-destination 192.168.1.11:22 -A PREROUTING -p tcp -m tcp -i eth3 --dport 1003 -j DNAT --to-destination 192.168.1.12:22 -A POSTROUTING -o eth3 -j MASQUERADE These are identical on both primary and backup lvs servers. When I reboot (or shutdown) primary, backup does create the routes to the real servers... In order to get anything back FROM the real servers, I have to reload iptables... Anyone have any ideas? Thanks- P