sorry for posting again, but this time my questions are simple:
using LVS and direct routing:
if my director is a firewall as well using ipchains
in which chain (input, forward, ouput) can I find (and filter)
the packages which are forwarded to the realservers ?
This question may sound stupid but running my director on eth0:110
and having both the output and forward chain configured like this
# ipchains -P output DENY
# ipchains -P forward DENY
and no rules in any of them (using the -F option). Traffic is still
forwarded to the servers.
do I have to do a special setup because of the virtual IP address ?
I didn´t find anything on the man page of ipchains.
regards,
Joern
|