yup, I did that and it works, but is that safe?
-----Original Message-----
From: Martijn Klingens [mailto:mklingens@xxxxxx]
Sent: Wednesday, October 02, 2002 10:01 AM
To: lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Subject: Re: iptables and lvs_nat
On Wednesday 02 October 2002 17:58, Alex Kramarov wrote:
> Look at my previous email. this doesn't work with lvs (at least for me),
> lvs'ed connections don't seem to register with iptables correctly.
Hmm, then the only option is the classical non-stateful version:
iptables -I INPUT -p tcp --dport 80 ! --syn -d ${RIP} -j ACCEPT
(Should be INPUT in my other mail too btw, as the LVS box truly has that IP,
not FROWARD, sorry.)
--
Martijn
_______________________________________________
LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to http://www.in-addr.de/mailman/listinfo/lvs-users
|