#!/bin/bash export PATH=/usr/sbin:/usr/bin:/sbin:/bin IPTABLES=/sbin/iptables MAC_NODE08=00:30:48:9b:42:c2 MAC_NODE09=00:30:48:99:b8:72 MARK08=6 MARK09=7 VIP=172.19.96.33 VPORT=80 case `uname -n` in node08|node08.*) RMAC=${MAC_NODE09} MARK=${MARK08} ;; node09|node09.*) RMAC=${MAC_NODE08} MARK=${MARK09} ;; *) exec 2>&1 echo "this script is not supposed to be run on host `uname -n`" exit 1 ;; esac $IPTABLES -t mangle -F $IPTABLES -t mangle -I PREROUTING -d $VIP -p tcp -m tcp --dport $VPORT -m mac \! --mac-source $RMAC -j MARK --set-mark 0x${MARK}