Hi,
I wonder if somebody could help.
I'd like to prevent people from using services on ha-nodes via their
real addresses and to make them use the virtual IP.
Let me clear it a bit. Let say that I have two servers HA1 and HA2 with
eth0 192.168.1.251 and 192.168.1.252 respectively.
In the haresources file is defined smth like
IPaddr2::192.168.1.254/24/eth0/192.168.1.255 \
nfslock \
nfs \
...

Is it possible to set linux firewall so that all requests; for example;
to eth0 port:111 (NFS) should be blocked and
these to eth0:0 port:111 should be allowed? If yes -- could somebody
explain me how to make it with iptables?

with kind regards
kris


_______________________________________________
Linux-HA mailing list
[email protected]
http://lists.linux-ha.org/mailman/listinfo/linux-ha
See also: http://linux-ha.org/ReportingProblems

Reply via email to