[Gluster-users] GlusterFs inside a firewall

[Ricardo Leal]

Hello,

I'm trying to use gluster inside an openvpn tunnel and it works quite well,

Openvpn is configured as point-to-point.

Computer 1
eth1: 80.70.60.2
tun0:  10.200.0.1

Computer 2
eth1: 80.70.60.1
tun0: 10.200.0.2

I've set some iptables rules in eth1 that only allow a vpn conection.

iptables -F
iptables -A INPUT -i eth1 -p icmp -j ACCEPT           # allow ping
iptables -A INPUT -i eth1 -p tcp --dport 1194 -j ACCEPT # allow openvpn
iptables -A INPUT -i eth1 -j DROP                     # drop everything else

This is in both computers.

The status on gluster is :

gluster peer status
Number of Peers: 1

Hostname: 10.200.0.2
Uuid: 00e046be-94ae-43f6-a3df-b69e10061001
State: Peer in Cluster (Disconnected)

gluster peer status
Number of Peers: 1

Hostname: 10.200.0.1
Uuid: 205f404f-c01a-4180-be44-cc3f88c175fe
State: Peer in Cluster (Disconnected)

I've try this

iptables -A INPUT -i tun0 -j ACCEPT

the only way is to remove

iptables -A INPUT -i eth1 -j DROP

and it works.

Can you help me find the needle ?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://supercolony.gluster.org/pipermail/gluster-users/attachments/20140718/e0bbcfd6/attachment.html>