1,199 reputation
815
bio website
location
age
visits member for 5 years, 1 month
seen Feb 19 at 3:16

Jun
23
awarded  Popular Question
Jun
3
awarded  Yearling
Feb
9
awarded  Tumbleweed
Feb
4
awarded  Taxonomist
Sep
20
answered Upgrade Postgresql database from 9.1 to 9.2 AND 32-bit to 64-bit
Sep
18
comment Set up an NTP server to allow local machines to be syncronised for Linux
umm, not sure what you mean by completely different setting. It's different in one sense but not in the goal. The setup addresses your two goals of (1) "a machine to act as an ntp server to which the other local machines will syncronise their times to." (2) "This needs to happen regardless of whether the ntp server machine is connected to the internet". So you could omit the firewall stuff I mentioned and still glean something from this could you not?
Sep
16
answered Set up an NTP server to allow local machines to be syncronised for Linux
Aug
9
awarded  Informed
Jun
6
comment Relationship between /etc/hosts and iptables?
@Steve: You're not making sense. Just remove the two iptables lines and let GlassFish listen on the unpriv ports 8080 and 8181; you will need to append 8080 and 8181 accordingly to your URIs. Maybe I assumed you understood that point. If you insist on using 80 and 443 or no URI modifications you might be able to do an HTTP redirect if GlassFish supports that but then you're back to SOMETHING needing to camp out on 80 and 443 to either do the redirect or GlassFish..
Jun
6
comment Relationship between /etc/hosts and iptables?
I suggested changing to 80/443 before I knew of your constraint to not run as priv account. What I say above is get rid of the iptables -t nat rules if this is the case and connect directly to the GlassFish server without going through a PAT. Remove the two iptables -t nat lines and it should work. I say above that if you need to block off more ports from public Internet, use filter chain.
Jun
6
comment Relationship between /etc/hosts and iptables?
You do not need a priv account if you can change your GlassFish configuration to start up and use 8080 and 8181...
Jun
6
comment Relationship between /etc/hosts and iptables?
I thought you had stated that you can change GlassFish configuration to listen on a non-priv port. What does "Yes I can do that." refer too?
Jun
6
comment Relationship between /etc/hosts and iptables?
@Steve: Why will you have to grant its user account to listen on a privileged port if you "can do that" means you can change the GlassFish server to listen on an unpriv port? Many Linux processes often are launched by root but then switch to a jailed or regular/unpriv user account. But if you claim you can change the port, then you should be all set. No need to run as root...
Jun
5
comment Relationship between /etc/hosts and iptables?
@Steve: Not familiar with GlassFish; but can't you change the port GlassFish listens on from 80 & 443 to 8080 and 8181 somewhere?
Jun
5
comment Relationship between /etc/hosts and iptables?
oh-I-C: You want to connect TO this server. This VPS box is listening on an IP address bound to ETH0 and port 80 & 443 which you are PATing the connection. Why do you need PAT if, presumably, the ETH0 is public facing? If you're looking to limit port exposure, you should just stick with iptables -t filter rules and just get rid of the PREROUTING stuff. IPTABLES -A INPUT is changing the filter table.
Jun
5
answered Relationship between /etc/hosts and iptables?
Jun
3
awarded  Yearling
May
13
awarded  Caucus
May
1
awarded  Popular Question
Feb
14
comment GLUSTERFS or DFSR
Looked but can't find the article. Been running DFSR since I made this post & it has been very hands-off. IE it just works. One thing that got me into a little trouble was forgetting to set priority on DFS shares. I keep data on both servers and run full mesh. Some apps access data on srvr1 while other apps use srvr2 and so priorities should be set to prevent workstations from using less preferred node for a given app. Being a huge Linux advocate, I must say it was nice not mucking around in .conf files and ./configure;make;make install; not typical of M$ to work this well out of the box.