RE: Piranha (LVS) + Firewall (Shorewall) on the same box

Thanks for the comment!

I just want to add that I did implement shorewall and piranha without a hitch...

Follow the ideals laid out below by Karl and all is well.

-ed

-----Original Message-----
From: Karl Wyant [mailto:[email protected]]
Sent: Wednesday, June 19, 2002 6:02 PM
To: [email protected]
Subject: Re: Piranha (LVS) + Firewall (Shorewall) on the same box


I run piranha and ipchains based firewalls on the same box without 
undue issue, unless you consider ipchains alone to be undue issue. 
<G>  No experience with shorewall, however.  You will need ports 
freed for everything you will be doing, example... if you intend your 
internal servers to reach external nameservers or be able to send 
email, then you will need to open relevant ports.


>Has anyone had any experience putting a firewall and Piranha/LVS 
>(NAT) on the same box?  Are there any gotchas to look out for / 
>special considerations?
>
>In the case of shorewall, you can setup your NAT enviornment within 
>the firewall.. Would I be correct in assuming I just need to make 
>sure the Real Servers can talk to the firewall and allow port 80 
>traffic to hit the public firewall (virutal interfaces for real 
>servers) interface and all is well?
>
>Thanks!
>-ed
>
>**************************************************************************
>This e-mail and any files transmitted with it are intended for the 
>use of the addressee(s) only and may be confidential and covered by 
>the attorney/client and other privileges. If you received this 
>e-mail in error, please notify the sender; do not disclose, copy, 
>distribute, or take any action in reliance on the contents of this 
>information; and delete it from your system. Any other use of this 
>e-mail is prohibited.
>
>
>
>_______________________________________________
>Piranha-list mailing list
>[email protected]
>https://listman.redhat.com/mailman/listinfo/piranha-list


-- 
Karl Wyant
[email protected]
http://www.saturnsys.com



_______________________________________________
Piranha-list mailing list
[email protected]
https://listman.redhat.com/mailman/listinfo/piranha-list