[lvs-users] keepalived: LVS-DR split brain w/firewalls up

[Gerry Reno]

Graeme Fowler wrote:
> If it were me I'd make that line 1 of my ruleset and restart iptables.
> Adding it to alive set might mean it's after a REJECT or DROP rule.
>
> Graeme
>
>   
That got it! I had a reject catch all. Moving the line up made it effective.

Thanks,
Gerry