PacketFence
Bug Tracking System

View Issue Details Jump to Notes ] Issue History ] Print ]
IDProjectCategoryView StatusDate SubmittedLast Update
0001240PacketFenceconfigurationpublic2011-07-25 09:492011-09-21 22:16
Reporterfgaudreault 
Assigned Toobilodeau 
PrioritynormalSeverityminorReproducibilityalways
StatusclosedResolutionfixed 
PlatformOSOS Version
Product Versiondevel 
Target VersionFixed in Version3.0.0 
Summary0001240: Missing iptables chain for heartbeat
DescriptionWhen using HA setup, we should include a chain iptables for the heartbeat interface.
Additional InformationYou can add a section like this in conf/iptables.conf

:input-heartbeat-if - [0:0]
#SSH
-A input-heartbeat-if --match state --state NEW --match tcp --protocol tcp --dport 22 --jump ACCEPT
# Corosync
-A input-heartbeat-if --protocol udp --match udp --dport 5405 --jump ACCEPT
-A input-heartbeat-if --protocol udp --match udp --dport 5407 --jump ACCEPT
#DRBD
-A input-heartbeat-if --protocol tcp --match tcp --dport 7788 --jump ACCEPT

And match the chain to the proper interface.
TagsNo tags attached.
fixed in git revision
fixed in mtn revisioncf3ecf9170e1d305ead540c7b1096d8260ed68ce
Attached Files

- Relationships

-  Notes
(0002116)
obilodeau (reporter)
2011-08-01 16:30

Doing this automatically implies adding a new type to the [interface] section.

Are you ok with this? What about: high-availability? (to be technology or software agnostic)

Otherwise adding the rules to conf/iptables.conf by yourself is easy but not as easy.
(0002140)
obilodeau (reporter)
2011-08-17 12:10

done
(0002249)
obilodeau (reporter)
2011-09-21 22:15

fix released in 3.0

- Issue History
Date Modified Username Field Change
2011-07-25 09:49 fgaudreault New Issue
2011-08-01 16:30 obilodeau Note Added: 0002116
2011-08-17 11:03 obilodeau Status new => assigned
2011-08-17 11:03 obilodeau Assigned To => obilodeau
2011-08-17 12:10 obilodeau mtn revision => cf3ecf9170e1d305ead540c7b1096d8260ed68ce
2011-08-17 12:10 obilodeau Note Added: 0002140
2011-08-17 12:10 obilodeau Status assigned => resolved
2011-08-17 12:10 obilodeau Fixed in Version => trunk
2011-08-17 12:10 obilodeau Resolution open => fixed
2011-09-21 22:07 obilodeau Fixed in Version trunk => 3.0.0
2011-09-21 22:15 obilodeau Note Added: 0002249
2011-09-21 22:16 obilodeau Status resolved => closed


Copyright © 2000 - 2012 MantisBT Group
Powered by Mantis Bugtracker