|
> -----Original Message-----
> From: lvs-users-bounces@xxxxxxxxxxxxxxxxxxxxxx [mailto:lvs-users-
> bounces@xxxxxxxxxxxxxxxxxxxxxx] On Behalf Of Joseph Mack NA3T
> Sent: 13 October 2005 14:46
> To: LinuxVirtualServer.org users mailing list.
> Subject: RE: lvs + squid + squidguard
>
> On Thu, 13 Oct 2005, Tony Spencer wrote:
>
> > Hi Joe
> >
> > Thanks for the reply.
> > First problem is now solved.
> > I added an iptables rule so any web requests locally to the VIP are
> > rewritten to the local server on port 80.
>
> OK
>
> why are your LVS-NAT realservers seeing requests to the VIP.
> All packets when they get to the LVS-NAT realservers should
> have a dst_addr of the RIP.
Because the LVS-NAT servers run both squid and http and use the same VIP IP
address.
So if someone come through the squid server requesting a webpage that
resides on the LVS-NAT server the IP would resolve to the VIP.
If that makes sense...
>
> > You are correct that I'm running LVS-NAT.
> > I'm a little lost on your reply though.
> > Are you speaking about the SquidGuard rules or the LVS rules??
>
> SquidGuard. It's just a guess.
SquidGuard has no IP rules.
It just blocks certain domains/urls listed in a db file.
Tony
>
> Joe
>
> --
> Joseph Mack NA3T EME(B,D), FM05lw North Carolina
> jmack (at) wm7d (dot) net - azimuthal equidistant map
> generator at http://www.wm7d.net/azproj.shtml
> Homepage http://www.austintek.com/ It's GNU/Linux!
> _______________________________________________
> LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
> Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
> or go to http://www.in-addr.de/mailman/listinfo/lvs-users
>
> --
> No virus found in this incoming message.
> Checked by AVG Anti-Virus.
> Version: 7.0.344 / Virus Database: 267.11.14/131 - Release Date:
> 12/10/2005
>
--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.344 / Virus Database: 267.11.14/131 - Release Date: 12/10/2005
|
