[RELEASE] Iptables tutorial 1.1.16

[RELEASE] Iptables tutorial 1.1.16

[Oskar Andreasson]

Hi all, 

This is a rather late notification about the fact that the iptables 
tutorial was released in version 1.1.16 three days ago. No big changes 
from 1.1.15, except tons of internal fixes since I moved from Red Hat to 
Debian on my main workstation. This caused a hole lot of problems for 
mirrors etc, but it should now be fixed again.

As always, available at http://iptables-tutorial.frozentux.net

Thanks, and sorry for disturbing all threads.

-- 
----
Oskar Andreasson
http://www.frozentux.net
http://iptables-tutorial.frozentux.net
http://ipsysctl-tutorial.frozentux.net
mailto:blueflux@koffein.net

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

firewall failover / cluster

[Hauser Marcel]

hi all

What are you guys using in order to provide a fault toleranced iptables 
firewall (master / slave ?)

Cheers Marcel

RE: firewall failover / cluster

[freedom]

Partially along this same subject, I am curious what is currently being
used in a fault tolerant AND load-balanced iptables configuration.
Perhaps a better question...is anybody using iptables in a HA, Load
balancing scenario?

Thanks!
Kameron


> -----Original Message-----
> From: netfilter-admin@lists.netfilter.org [mailto:netfilter-
> admin@lists.netfilter.org] On Behalf Of Hauser Marcel
> Sent: Thursday, December 19, 2002 9:07 PM
> To: netfilter@lists.netfilter.org
> Subject: firewall failover / cluster
> 
> hi all
> 
> What are you guys using in order to provide a fault toleranced
iptables
> firewall (master / slave ?)
> 
> Cheers Marcel
> 
> 
> 

Re: firewall failover / cluster

[Roberto Nibali]

freedom wrote:
> Partially along this same subject, I am curious what is currently being
> used in a fault tolerant AND load-balanced iptables configuration.
> Perhaps a better question...is anybody using iptables in a HA, Load
> balancing scenario?

http://www.linux-vs.org + http://keepalived.sf.net = load balanced HA nodes

Define iptables in a HA scenario, please. One part that is missing is the 
conntrack state transition synchronisation but this will still not make a packet 
filter HA, only an active/passive system.

Please check recent research papers emerged from symposia on network and 
security topics last year for further reference.

Regards,
Roberto Nibali, ratz
-- 
echo '[q]sa[ln0=aln256%Pln256/snlbx]sb3135071790101768542287578439snlbxq' | dc

Re: firewall failover / cluster

[Hauser Marcel]

Clarke wrote:
>>hi all
>>
>>What are you guys using in order to provide a fault toleranced iptables 
>>firewall (master / slave ?)
>>
>>Cheers Marcel
>>
> VRRP

Which implementation/daemon of the Protocol ?

How about the "outside" of the firewall ? (Public IP's and NAT for 
instance?)

Is everyone else on this list using VRRP too ? ;) or what else are you 
guys using to make an iptables firewall redundant ?

Cheers Marcel