Redundant ipchains machines

John Wunderlich (John_Wunderlich@ceridian.ca)
Wed, 6 Jan 1999 09:12:16 -0600


Hi all;

I would appreciate a recomendation on a way to go - shell script, perl
script, other? - for the following issue. I am setting up firewalls using
ipchains, which I have working quite nicely (It was worth the hassle of
learning how to compile the kernel). For reliability reasons I want to set
up two machines with failover. I was thinking that I could use cron to
automate the following:

1. On active firewall ipchains-save every x minutes to make sure of
up-to-date config.
2. On active firewall copy saved config to backup firewall (up but not
running ipchains).
3. On backup firewall check that ipchains is running on active every x
secs. Start ipchains from most recent config if not.
4. Send alert if failover occurs.

My questions are - Does this make linux-sense and if so any syntax, scripts
or boot-strap help would be appreciated. I've always believed in not
reinventing the wheel. I will RTFM if someone will tell which is the
correct FM for these circumstances.

Thanks in advance.

-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to majordomo@vger.rutgers.edu