Re: LVS-TUN and firewall on nodes

[graeme@xxxxxxxxxxx]

Quoting Olivier Bonvalet <olivier.bonvalet@xxxxxxxxxx>:
> I'm searching for the rule to set on nodes to allow the tunneling.
> (the port 80 is already allowed, but not the "tunnel")
Depending on what your tunnel interface is, something like this will  
accept TCP port 80 connections on your tunnel interface:
/sbin/iptables -I INPUT -i tun0 -s 0/0 -p tcp -m tcp --dport 80 -j ACCEPT

If you wanted it to accept all traffic on the tunnel interface use:

/sbin/iptables -I INPUT -i tun0 -j ACCEPT

Graeme