Updating multple iptables on servers

Updating multple iptables on servers

[hyper]

Is it possible to update iptables from a central server. I got 25 servers
using the same firewall and i need something to update them all from a
central server. 
 
Any ideas?
 
Hilsen Thomas Kristensen

Re: Updating multple iptables on servers

[Chris Brenton]

On Tue, 2004-06-08 at 04:09, hyper@ubn.dk wrote:
>
> Is it possible to update iptables from a central server. I got 25 servers
> using the same firewall and i need something to update them all from a
> central server. 
>  
> Any ideas?

Fanout is your friend:
http://www.stearns.org/fanout/

To quote the docs: "This tool will run commands on multiple machines at
the same time via ssh."

Bill has a number of excellent Linux tools up on his site, this being
one of them.

HTH,
Chris

Re: Updating multple iptables on servers

[Antony Stone]

On Tuesday 08 June 2004 9:09 am, hyper@ubn.dk wrote:

> Is it possible to update iptables from a central server. I got 25 servers
> using the same firewall and i need something to update them all from a
> central server.
>
> Any ideas?

Rsync or scp, then iptables-restore?

Antony.

-- 
This email is intended for the use of the individual addressee(s) named above 
and may contain information that is confidential, privileged or unsuitable 
for overly sensitive persons with low self-esteem, no sense of humour, or 
irrational religious beliefs.

If you have received this email in error, you are required to shred it 
immediately, add some nutmeg, three egg whites and a dessertspoonful of 
caster sugar.   Whisk until soft peaks form, then place in a warm oven for 40 
minutes.   Remove promptly and let stand for 2 hours before adding some 
decorative kiwi fruit and cream.   Then notify me immediately by return email 
and eat the original message.

                                                     Please reply to the list;
                                                           please don't CC me.

Re: Updating multple iptables on servers

[John A. Sullivan III]

On Tue, 2004-06-08 at 04:09, hyper@ubn.dk wrote:
> Is it possible to update iptables from a central server. I got 25 servers
> using the same firewall and i need something to update them all from a
> central server. 
>  
> Any ideas?
>  
> Hilsen Thomas Kristensen
Although it is still a few months away from release, ISCS
(http://iscs.sourceforge.net) will help you do this.  It will also
manage any VPN and router configurations and, eventually, even the layer
two configuration.  It will do this just as easily if every firewall is
different - the work is the same - describe the environment and ISCS
automatically creates and distributes the list of rules to create that
environment.  I wish I could tell you it's here and ready for use but
it's still in very active development.  We're working on the last of the
iptables modules as I write - John
-- 
Open Source Development Corporation
Financially sustainable open source development
http://www.opensourcedevelopmentcorp.com

Updating multple iptables on servers

[Thomas Kristensen]

Is it possible to update iptables from a central server. I got 25 servers
using the same firewall and i need something to update them all from a
central server. 
 
Any ideas?
 
Hilsen Thomas Kristensen

Re: Updating multple iptables on servers

[John A. Sullivan III]

On Tue, 2004-06-08 at 03:46, Thomas Kristensen wrote:
> Is it possible to update iptables from a central server. I got 25 servers
> using the same firewall and i need something to update them all from a
> central server. 
>  
> Any ideas?
>  
> Hilsen Thomas Kristensen
Strange . . . I thought I saw this identical post a few days ago!

Although it is still a few months away from release, ISCS
(http://iscs.sourceforge.net) will help you do this.  It will also
manage any VPN and router configurations and, eventually, even the layer
two configuration.  It will do this just as easily if every firewall is
different - the work is the same - describe the environment and ISCS
automatically creates and distributes the list of rules to create that
environment.  I wish I could tell you it's here and ready for use but
it's still in very active development.  We're working on the last of the
iptables modules as I write.

fwbuilder (http://www.fwbuilder.org) is quite a good product more along
the lines of traditional firewall GUI's and is available now.
 - John
-- 
Open Source Development Corporation
Financially sustainable open source development
http://www.opensourcedevelopmentcorp.com

Re: Updating multple iptables on servers

[Antony Stone]

On Thursday 10 June 2004 10:43 am, John A. Sullivan III wrote:

> On Tue, 2004-06-08 at 03:46, Thomas Kristensen wrote:
> > Is it possible to update iptables from a central server. I got 25 servers
> > using the same firewall and i need something to update them all from a
> > central server.
> >
> > Any ideas?
> >
> > Hilsen Thomas Kristensen
>
> Strange . . . I thought I saw this identical post a few days ago!

So did I.

Chris Brenton's answer looked promising:

http://www.stearns.org/fanout

Let us know if it meets your needs, or if problems remain.

Regards,

Antony.

-- 
"Linux is going to be part of the future. It's going to be like Unix was."

 - Peter Moore, Asia-Pacific general manager, Microsoft

                                                     Please reply to the list;
                                                           please don't CC me.