I have two servers that uses ucarp as failover. On each server
eth1:1 is reserved for ucarp's keepalive connection.
ucarp uses the destination IP as multicast address
On ucarp master server is
192.168.245.2 and on the secondary serve is
I would like to make an iptables rule on each server, so these NIC's are not used by anyone by mistake. I.e. drop everything expect for ucarp.
How would such a rule look like for the master server?
I assume something like this?
iptables -P INPUT -i eth1:1 -j DROP iptables -A INPUT -i eth1:1 ? something with multicast ? -j ACCEPT