similar to: High-Availability shorewall

Hey all, I''m trying to setup roadwarrior connection to my internal network. So I''ve setup openvpn to create a tap0 connection and also have bridged the eth1 (leads to my internal computers 192.168.2.10-30 and tap0 which is the VPN connection. On my shorewall setup I have br0 maped to zone loc and eth0 to be my internet and I have masqing on my br0 to get my internal computers

Hi, I''ve noticed that if I have NIS enabled then shorewall will fail to start correctly as there is a brief time during startup (and restart) that the network is wholly disconnected causing NIS to object during RPC. The problem appears to be that during initialization and building of the chains the default is to allow existing connections and internal traffic to/from loopback,

Hi. Is anyone using conntrack-tools to implement gateway failover on a network with windows clients? I set it up with ucarp and keepalived, and found that gratuitous ARP doesn''t always seem to update the cache on Windows machines. It works the first time, but if a second failover happens, the client continues to send stuff to the wrong MAC address. Linux machines work fine.

I''m currently building a firewall for a network with 2 ISP links. Unfortunately, one of the ISP''s doesn''t support BGP yet, otherwise I would be doing load balancing at the router, instead of the firewall. I''ve been trying to find information on how to get WonderShaper working, but everything I''ve found talks about setting it up for a firewall with one

Hi, all! Can I enable multicasting via shorewall? I have router with Gentoo Linux (one interface to ISP, one with alises - to local network). Shorewall work perfect! But now I need setup Quagga (zebra) for dynamic routing between one more router via another provider. All routers daemons (zebra, ripd, ospf) used multicasting. In my configuration already enabled allowBcast and etc.

Hi Folks, Can i account proxyarped pc´s ?? Like know how much web traffic passthru a specific person ip using shorewall ? So i can know how much bandwidth that specific IP EAT ? Thanks alot Carlos Arnt ------------------------------------------------------- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward

Hi, there now i am booting pxelinux menu32 with 2 boot images 1. DOS boot image 2. Thinstaion pxelinux and my directory structure is like this (Pxelinux with menu32) /tftpdroot/pxelinux.0 /tftpdroot/pxelinux.cfg/default /tftpdroot/dos.imz (DOS bootimage) /tftpdroot/memdisk (memdisk package) (Thinstation Pxelinux) /tftpdrooot/pxe/pxelinux.0 /tftpdroot/pxe/initrd

Hi. I''m wondering if there''s a good way to configure a Linux firewall box to failover to a single backup server, while preserving connection state. This question has been asked before, but the latest reference I can find is from 2004, at which time Linux had no equivalent of OpenBSD''s pfsync, though Harald was said to be working on one. Did anything come of those

Thanks all for the response to my problem. Outside interrupts made me set aside the project temporarily. Reading your input (one email of which was rejected by our email engine for reasons unknown) the thinking seems to be that Apache can''t resolve its virtual hostnames. I had not originally installed the dnsmasq module, so did that. However, there was no difference in performance. I

Can someone point me for good VRRPD (rfc2338) implementation on linux. Some stable and live project Thanks _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Hello, Could someone experienced suggest good solution for failover advanced router ? The router for which I need redundancy is quite complex: 1) has 5 interfaces 2) uses the same network and the other network IP aliases on some interfaces 3) uses bunch of policy routing rules 4) uses proxyarp feature on some interfaces 5) uses complex iptables setup [propably not important in this

Hi, So, I am writing a module to install and configure ucarp. There is only one module in puppet forge and that is not that good. In ucarp, same configuration files have to be served on two servers and to configure the host I am defining a custom resource ucarp::host::config. So, for using, I''ll have to create this resource two times on two different servers. So, this resource

Hello everybody. I have a problem setting up gluster failover funcionality. Based on manual i setup ucarp which is working well ( tested with ping/ssh etc ) But when i use virtual address for gluster volume mount and i turn off one of nodes machine/gluster will freeze until node is back online. My virtual ip is 3.200 and machine real ip is 3.233 and 3.5. In gluster log i can see: [2011-06-06

Has anyone successfully setup a shorewall Ucarp solution?

All, We are in the process of determining a virtualized infrastructure and wanted to hear from current users of Gluster and VMWare. What we were looking to setup was an HA ESXi cluster (2 heads) with gluster backend (4 bricks to start, replicated/distributed), all backend connectivity would be 10Gbe. Mainly the storage would be for VM images but may include NAS files later. So our

Morning Folks, should I prefer NFS with UCARP or native GlusterFS mounts for serving the system images to XCP? Which one performes better over 1G network links? NFS is probaby easier to setup due to existing tools like rpcinfo and showmount, both are used inside the storage container code, and there is some code for NFS, not for GlusterFS, except I write one. UCARP has the disadvantage that

Hello List: Recently our shorewall FW server went dead (PS failure) & brought the entire system down. Luckily we are testing the FW and other servers, so we did not loose anything. Now we have decided to setup two Shorewall FW servers with a primary & another fallover FW server. I have done some research cruised the Internet and found that a product ''UCARP''

Hi, we've successfully configured GlusterFS mirroring across two identical nodes [1]. We're running the file share under a Virtual IP address using UCarp. We have different clients connected using NFS, CIFS and GlusterFS. When we simulate a node failure, by unplugging it, it takes about 5 seconds for the CIFS and GlusterFS clients to refresh the connection and continue operation. The

Hi R help list I'm simulating logistic regression data with a specified odds ratio (beta) and have a problem/unexpected behaviour that occurs. The datasets includes a lognormal exposure and diseased and healthy subjects. Here is my loop: ors <- vector() for(i in 1:200){ # First, I create a vector with a lognormally distributed exposure: n <- 10000 # number of study subjects

Hi! I am looking for suggestions how I can add rules (or change the configuration otherwise) without interrupting of services. Right now, when I need to do a ''shorewall restart'' all services are not available during this time. I tried playing with the ''routestopped'' parameter but without success. How do you get around this? Thanks in advance, Christian