1,219 reputation
819
bio website
location
age
visits member for 5 years, 7 months
seen Dec 17 at 19:46

Nov
18
awarded  Popular Question
Nov
3
awarded  Popular Question
Aug
24
awarded  Nice Answer
Aug
8
awarded  Nice Answer
Jun
23
awarded  Popular Question
Jun
3
awarded  Yearling
Feb
9
awarded  Tumbleweed
Feb
4
awarded  Taxonomist
Sep
20
answered Upgrade Postgresql database from 9.1 to 9.2 AND 32-bit to 64-bit
Sep
18
comment Set up an NTP server to allow local machines to be syncronised for Linux
umm, not sure what you mean by completely different setting. It's different in one sense but not in the goal. The setup addresses your two goals of (1) "a machine to act as an ntp server to which the other local machines will syncronise their times to." (2) "This needs to happen regardless of whether the ntp server machine is connected to the internet". So you could omit the firewall stuff I mentioned and still glean something from this could you not?
Sep
16
answered Set up an NTP server to allow local machines to be syncronised for Linux
Aug
9
awarded  Informed
Jun
6
comment Relationship between /etc/hosts and iptables?
@Steve: You're not making sense. Just remove the two iptables lines and let GlassFish listen on the unpriv ports 8080 and 8181; you will need to append 8080 and 8181 accordingly to your URIs. Maybe I assumed you understood that point. If you insist on using 80 and 443 or no URI modifications you might be able to do an HTTP redirect if GlassFish supports that but then you're back to SOMETHING needing to camp out on 80 and 443 to either do the redirect or GlassFish..
Jun
6
comment Relationship between /etc/hosts and iptables?
I suggested changing to 80/443 before I knew of your constraint to not run as priv account. What I say above is get rid of the iptables -t nat rules if this is the case and connect directly to the GlassFish server without going through a PAT. Remove the two iptables -t nat lines and it should work. I say above that if you need to block off more ports from public Internet, use filter chain.
Jun
6
comment Relationship between /etc/hosts and iptables?
You do not need a priv account if you can change your GlassFish configuration to start up and use 8080 and 8181...
Jun
6
comment Relationship between /etc/hosts and iptables?
I thought you had stated that you can change GlassFish configuration to listen on a non-priv port. What does "Yes I can do that." refer too?
Jun
6
comment Relationship between /etc/hosts and iptables?
@Steve: Why will you have to grant its user account to listen on a privileged port if you "can do that" means you can change the GlassFish server to listen on an unpriv port? Many Linux processes often are launched by root but then switch to a jailed or regular/unpriv user account. But if you claim you can change the port, then you should be all set. No need to run as root...
Jun
5
comment Relationship between /etc/hosts and iptables?
@Steve: Not familiar with GlassFish; but can't you change the port GlassFish listens on from 80 & 443 to 8080 and 8181 somewhere?
Jun
5
comment Relationship between /etc/hosts and iptables?
oh-I-C: You want to connect TO this server. This VPS box is listening on an IP address bound to ETH0 and port 80 & 443 which you are PATing the connection. Why do you need PAT if, presumably, the ETH0 is public facing? If you're looking to limit port exposure, you should just stick with iptables -t filter rules and just get rid of the PREROUTING stuff. IPTABLES -A INPUT is changing the filter table.
Jun
5
answered Relationship between /etc/hosts and iptables?