Re: Syncing iptables rules between two servers

[Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>]

On 2006-04-09 Lars Solberg wrote:
> Is there anyone that know about how I can "sync" iptables rules on two
> different servers? The plan is to have (on one of the servers) a
> script that automaticly block ip adresses with iptables depending on
> different conditions. When that ip adress is blocked I want it to
> automaticly be blocked on another server to.

Maybe you can use iptables-save, iptables-restore and rsync to achieve
this. However, IMHO automatic network shunning is a Very Bad Idea(tm),
so I'd advise strongly against this.

Regards
Ansgar Wiechers
-- 
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq

-------------------------------------------------------------------------
This List Sponsored by: Webroot

Don't leave your confidential company and customer records un-protected. 
Try Webroot's Spy Sweeper Enterprise(TM) for 30 days for FREE with no 
obligation. See why so many companies trust Spy Sweeper Enterprise to 
eradicate spyware from their networks.
FREE 30-Day Trial of Spy Sweeper Enterprise

http://www.webroot.com/forms/enterprise_lead.php
--------------------------------------------------------------------------