LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

iptables and lvs_nat

To: "'lvs-users@xxxxxxxxxxxxxxxxxxxxxx'" <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: iptables and lvs_nat
From: Tim Cronin <tim@xxxxxxxxxxxxxxx>
Date: Tue, 1 Oct 2002 16:48:41 -0500
I've got lvs_nat working with http and ftp
I've got a two nic box on two networks
eth0 is my external interface

I have the following in my iptables script

modprobe ip_conntrack 
modprobe ip_conntrack_ftp 

iptables -A INPUT -i eth0 -p tcp ! --syn \
-m state --state NEW -j LOG --log-prefix "IPTABLES SYN: "
iptables -A INPUT -i eth0 -p tcp ! --syn -m state --state NEW -j REJECT 

with these enabled  both http and ftp are unavailable.
from the external network and I get log entries.




<Prev in Thread] Current Thread [Next in Thread>