Redirection of packets based on source IP address

[Joseph Mack NA3T]

On Tue, 13 Feb 2007, Martijn Grendelman wrote:

> Ehr.. no reason, I guess. It's still there from when I 
> used RR scheduling and I guess I forgot to remove it. I 
> don't think it is actually useful.

Are you up for removing persistence (as a test) and let me 
know how it goes?

>> On a different topic - why do you have publically 
>> accessable realservers?
>
> Why, is that a problem? Security or otherwise?

I've been telling everyone (in the HOWTO and on the mailing 
list) not to expose the realservers. This gives attackers 
more places to get in. If you aren't having any problems, 
then I should at least remember that not everyone has to do 
it.

> We run a few applications that don't scale well, so we 
> keep the webserver on the realservers open for those.

OK

Joe

-- 
Joseph Mack NA3T EME(B,D), FM05lw North Carolina
jmack (at) wm7d (dot) net - azimuthal equidistant map
generator at http://www.wm7d.net/azproj.shtml
Homepage http://www.austintek.com/ It's GNU/Linux!