FirewallRouting < Sandbox

Firewall Routing Setup

My goal here is to have two firewalls, one active, one passive. This involves a few things: the basic layout of the ethernet devices (via udev rules), Heartbeat, TCP tuning, and (maybe) some basic routing rules.

Ethernet Device Udev setup

[root@fw01 ~]# cat /etc/udev/rules.d/60-net.rules

#ACTION=="add", SUBSYSTEM=="net", IMPORT{program}="/lib/udev/rename_device"

ACTION=="add", SUBSYSTEM=="net", IMPORT{program}="/lib/udev/rename_device", SYSFS{address}=="00:30:48:cf:31:8c", NAME="eth0"

ACTION=="add", SUBSYSTEM=="net", IMPORT{program}="/lib/udev/rename_device", SYSFS{address}=="00:30:48:cf:31:8d", NAME="eth1"

ACTION=="add", SUBSYSTEM=="net", IMPORT{program}="/lib/udev/rename_device", SYSFS{address}=="00:1b:21:4f:4d:78", NAME="eth2"

ACTION=="add", SUBSYSTEM=="net", IMPORT{program}="/lib/udev/rename_device", SYSFS{address}=="00:1b:21:4f:4d:79", NAME="eth3"

ACTION=="add", SUBSYSTEM=="net", IMPORT{program}="/lib/udev/rename_device", SYSFS{address}=="00:0e:1e:03:06:72", NAME="eth4"

ACTION=="add", SUBSYSTEM=="net", IMPORT{program}="/lib/udev/rename_device", SYSFS{address}=="00:0e:1e:03:06:73", NAME="eth5"

SUBSYSTEM=="net", RUN+="/etc/sysconfig/network-scripts/net.hotplug"

Heartbeat

Here's the basic setup of my heartbeat

TCP Tuning

Basic Routing

-- JasonTemple - 2010-12-16

This topic: Sandbox > TWikiUsers > JasonTemple > JasonTempleSandbox > FirewallRouting
Topic revision: r2 - 2010-12-16 - JasonTemple