Re: [Ganglia-developers] Firewall troubles (multicasting with APF/IPTables)

2005-09-20 Thread Jason A. Smith
If you want your routing changes to take affect each time you boot then you can add them to the /etc/sysconfig/static-routes config file (at least for RedHat Linux systems where this file is read by the network init script), which in your case would look something like this: any -net 239.2.11.71 n

Re: [Ganglia-developers] Firewall troubles (multicasting with APF/IPTables)

2005-09-20 Thread Alex Davies
Dear Jason, The following two commands appear to have fixed it: route add -net 239.2.11.71 netmask 255.255.255.255dev eth1 route add -net 255.255.255.255 netmask 255.255.255.255 dev eth1 However I can

Re: [Ganglia-developers] Firewall troubles (multicasting with APF/IPTables)

2005-09-20 Thread Jason A. Smith
If your systems have more than one interface then you probably need to tell gmond which interface to bind to by setting the mcast_if option to eth1 in the gmond.conf file. The exact details will vary depending on which version of ganglia you are using, 2.5.x or 3.0.x. ~Jason On Tue, 2005-09-20

Re: [Ganglia-developers] Firewall troubles (multicasting with APF/IPTables)

2005-09-20 Thread Alex Davies
Dear All, Thank you for your continued support. The firewall is reporting errors like these: iptables: dropped input: IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:e0:81:32:00:1a:08:00 SRC=0.0.0.0 DST= 255.255.255.255 LEN=42 TOS=0x00 PREC=0x00 TTL=1 ID=62540 PR

Re: [Ganglia-developers] Firewall troubles (multicasting with APF/IPTables)

2005-09-20 Thread Jason A. Smith
If you think it is the iptables firewall that is causing you your problems then try turning on logging of dropped/rejected packets to help debug your problem: iptables -A INPUT -m limit --limit 3/m -j LOG --log-level info \ --log-prefix "iptables: dropped input: " this rule needs to go before t

Re: [Ganglia-developers] Firewall troubles (multicasting with APF/IPTables)

2005-09-19 Thread Alex Davies
I am afraid that I still experience the complete loss of monitoring as soon as I start my firewall even with those rules added... I cant seem to find any clear instructions on this, but is there any way to get each gmond daemon just to collect statistics from its local host and have one server col

Re: [Ganglia-developers] Firewall troubles (multicasting with APF/IPTables)

2005-09-19 Thread Jason A. Smith
If your network switches are configured to do igmp, then you will probably want to add an iptables rule like this: iptables -A INPUT -p igmp -j ACCEPT We have iptables configured on all of our systems running ganglia without any problems and only have 2 related rules, the igmp one above and a mul

Re: [Ganglia-developers] Firewall troubles (multicasting with APF/IPTables)

2005-09-19 Thread Alex Davies
___ > > From: [EMAIL PROTECTED] on behalf of Alex Davies > Sent: Mon 19/09/2005 19:37 > To: ganglia-developers@lists.sourceforge.net > Subject: [Ganglia-developers] Firewall troubles (multicasting with > APF/IPTables) > > > > Hi, > > I have been trying

RE: [Ganglia-developers] Firewall troubles (multicasting with APF/IPTables)

2005-09-19 Thread Bernard Li
Subject: [Ganglia-developers] Firewall troubles (multicasting with APF/IPTables) Hi, I have been trying to install ganglia on my 13-node cluster and had it all working wonderfully and was amazed how easilly until I restarted my firewall :) I use APF which sits on top of IPTables and as soon as I

Re: [Ganglia-developers] Firewall troubles (multicasting with APF/IPTables)

2005-09-19 Thread Alex Davies
Dear Mike, Many thanks for your very fast reply :) All my nodes are on the same switch, but we are using software firewalls. The cluster is trying to use the second ethernet port which is plugged into a dedicated switch, which is "trusted" and not supposed to be firewalled but I have a hunch that

[Ganglia-developers] Firewall troubles (multicasting with APF/IPTables)

2005-09-19 Thread Alex Davies
Hi, I have been trying to install ganglia on my 13-node cluster and had it all working wonderfully and was amazed how easilly until I restarted my firewall :) I use APF which sits on top of IPTables and as soon as I start it ganglia just stops communicating with the rest of the world. All IPs t