Changeset 1198 for branches/fc11-dev/lvs/debian/config/etc/network/if-up.d
- Timestamp:
- Jun 14, 2009, 5:26:53 AM (15 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
branches/fc11-dev/lvs/debian/config/etc/network/if-up.d/iptables
r1005 r1198 1 1 #!/bin/sh 2 2 ## Joe Presbrey <presbrey@mit.edu> 3 ## Quentin Smith <quentin@mit.edu> 3 4 ## SIPB Scripts LVS Firewall marks 4 5 5 6 iptables -F -t mangle 6 7 8 # Create a table for regular scripts hosts 9 iptables -t mangle -N scripts 2>/dev/null || : 10 11 # scripts-vhosts.mit.edu 12 iptables -A PREROUTING -t mangle -d 18.181.0.46 -j scripts 7 13 # scripts.mit.edu 8 iptables -A PREROUTING -t mangle -m tcp -m multiport -p tcp -d 18.181.0.46/31 --dports 25,80,443,444 -j MARK --set-mark 2 9 iptables -A PREROUTING -t mangle -m mark --mark 0 -d 18.181.0.46/31 -j MARK --set-mark 1 14 iptables -A PREROUTING -t mangle -d 18.181.0.43 -j scripts 15 # scripts-cert.mit.edu 16 iptables -A PREROUTING -t mangle -d 18.181.0.50 -j scripts 10 17 11 # scripts-new.mit.edu 12 iptables -A PREROUTING -t mangle -m tcp -m multiport -p tcp -d 18.181.0.43 --dports 25,80,443,444 -j MARK --set-mark 2 13 iptables -A PREROUTING -t mangle -m mark --mark 0 -d 18.181.0.43 -j MARK --set-mark 1 18 # Send Apache-bound traffic to FWM 2 (load-balanced) 19 iptables -A scripts -t mangle -m tcp -m multiport -p tcp --dports 80,443,444 -j MARK --set-mark 2 20 # Send SMTP-bound traffic to FWM 3 (load-balanced) 21 iptables -A scripts -t mangle -m tcp -p tcp --dport 25 -j MARK --set-mark 3 22 # Send everything else to FWM 1 (primary) 23 iptables -A scripts -t mangle -m mark --mark 0 -j MARK --set-mark 1 14 24 15 # scripts-cert.mit.edu 16 iptables -A PREROUTING -t mangle -m tcp -m multiport -p tcp -d 18.181.0.50/31 --dports 25,80,443,444 -j MARK --set-mark 2 17 iptables -A PREROUTING -t mangle -m mark --mark 0 -d 18.181.0.50/31 -j MARK --set-mark 1 18 19 # webzephyr.mit.edu 20 iptables -A PREROUTING -t mangle -m tcp -m multiport -p tcp -d 18.181.0.49 --dports 80,443 -j MARK --set-mark 2 25 # webzephyr.mit.edu is special because its SMTP needs to always go to the primary (FWM 1) 26 iptables -A PREROUTING -t mangle -m tcp -m multiport -p tcp -d 18.181.0.49 --dports 80,443,444 -j MARK --set-mark 2 21 27 iptables -A PREROUTING -t mangle -m mark --mark 0 -d 18.181.0.49 -j MARK --set-mark 1
Note: See TracChangeset
for help on using the changeset viewer.