[Shorewall-users] masq rules for LVS

2012-10-23 Thread Kristoffer Egefelt
Hi, I need some special masq rules to allow internal servers to resolve public IP's which are loadbalanced by LVS - the rule are: iptables -t nat -A POSTROUTING -m ipvs --vaddr /32 --vport 80 -j SNAT --to-source Also I need to enable: echo 1 > /proc/sys/net/ipv4/vs/conntrack Currently I do

Re: [Shorewall-users] masq rules for LVS

2012-10-23 Thread Tom Eastep
On 10/23/2012 12:50 AM, Kristoffer Egefelt wrote: > Hi, > > I need some special masq rules to allow internal servers to resolve public > IP's which are loadbalanced by LVS - the rule are: > > iptables -t nat -A POSTROUTING -m ipvs --vaddr /32 --vport 80 > -j SNAT --to-source > > Also I need to e