PacketFence - BTS - PacketFence
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0001240PacketFenceconfigurationpublic2011-07-25 09:492011-09-21 22:16
Reporterfgaudreault 
Assigned Toobilodeau 
PrioritynormalSeverityminorReproducibilityalways
StatusclosedResolutionfixed 
PlatformOSOS Version
Product Versiondevel 
Target VersionFixed in Version3.0.0 
fixed in git revision
fixed in mtn revisioncf3ecf9170e1d305ead540c7b1096d8260ed68ce
Summary0001240: Missing iptables chain for heartbeat
DescriptionWhen using HA setup, we should include a chain iptables for the heartbeat interface.
Steps To Reproduce
Additional InformationYou can add a section like this in conf/iptables.conf

:input-heartbeat-if - [0:0]
#SSH
-A input-heartbeat-if --match state --state NEW --match tcp --protocol tcp --dport 22 --jump ACCEPT
# Corosync
-A input-heartbeat-if --protocol udp --match udp --dport 5405 --jump ACCEPT
-A input-heartbeat-if --protocol udp --match udp --dport 5407 --jump ACCEPT
#DRBD
-A input-heartbeat-if --protocol tcp --match tcp --dport 7788 --jump ACCEPT

And match the chain to the proper interface.
TagsNo tags attached.
Relationships
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2011-07-25 09:49fgaudreaultNew Issue
2011-08-01 16:30obilodeauNote Added: 0002116
2011-08-17 11:03obilodeauStatusnew => assigned
2011-08-17 11:03obilodeauAssigned To => obilodeau
2011-08-17 12:10obilodeaumtn revision => cf3ecf9170e1d305ead540c7b1096d8260ed68ce
2011-08-17 12:10obilodeauNote Added: 0002140
2011-08-17 12:10obilodeauStatusassigned => resolved
2011-08-17 12:10obilodeauFixed in Version => trunk
2011-08-17 12:10obilodeauResolutionopen => fixed
2011-09-21 22:07obilodeauFixed in Versiontrunk => 3.0.0
2011-09-21 22:15obilodeauNote Added: 0002249
2011-09-21 22:16obilodeauStatusresolved => closed

Notes
(0002116)
obilodeau   
2011-08-01 16:30   
Doing this automatically implies adding a new type to the [interface] section.

Are you ok with this? What about: high-availability? (to be technology or software agnostic)

Otherwise adding the rules to conf/iptables.conf by yourself is easy but not as easy.
(0002140)
obilodeau   
2011-08-17 12:10   
done
(0002249)
obilodeau   
2011-09-21 22:15   
fix released in 3.0