Re: Syncing iptables rules between two servers

[Stoimen Gerenski <tim () bulsattv com>]

Hi,

You can use iptables-save and iptables-restore utilities to do this, but in 
this case you need to find a way to share the file which contains the iptables-
save result and to read this file to perform iptables-restore operation.

Regards,
Stoimen Gerenski


Lars Solberg <sunberg () gmail com>:

> Hi
>
> Is there anyone that know about how I can "sync" iptables rules on two
> different servers? The plan is to have (on one of the servers) a
> script that automaticly block ip adresses with iptables depending on
> different conditions. When that ip adress is blocked I want it to
> automaticly be blocked on another server to.
>
> One idea is to change the script that is adding the block rule to
> iptables to make it soo it can send the rule to the other server, but
> this is not an option, the iptables rules must be synced after the
> iptables rule have been added.
> Another idea is to get the iptables to use an sql database of some
> sort to load the rules, but I dont know how, and this whould be
> somehow ruining the whole thing of having a firewall if you make it
> dependent an sql server (i think).. But afterall, if this is possible
> this is option.
>
> Any ideas?
> Hope someone can help out..
>
> Thanks
>   Lars


---------------------------------------------------
Webmail of Bulsat Ltd. at http://mail.bulsattv.com/


-------------------------------------------------------------------------
This List Sponsored by: Webroot

Don't leave your confidential company and customer records un-protected. 
Try Webroot's Spy Sweeper Enterprise(TM) for 30 days for FREE with no 
obligation. See why so many companies trust Spy Sweeper Enterprise to 
eradicate spyware from their networks.
FREE 30-Day Trial of Spy Sweeper Enterprise

http://www.webroot.com/forms/enterprise_lead.php
--------------------------------------------------------------------------