Re: Blocking IP services using Solaris, Sun cluster commands

From: Walter Roberson (roberson_at_ibd.nrc-cnrc.gc.ca)
Date: 05/31/05


Date: 31 May 2005 04:05:53 GMT

In article <1117511193.803978.11840@g14g2000cwa.googlegroups.com>,
 <qazmlp1209@rediffmail.com> wrote:
:Our application runs on 2-node Sun cluster and it provides an IP
:service to the Clients. This IP service is available at cluster IP
:address:<ip_address> via port:<port>. We want to block this service for
:clients at certain times, due to various reasons. How exactly this can
:be done? I can understand that, we can use 'IP filtering' to do this. I
:would like to know whether this can be done using Solaris, Sun Cluster
:commands itself.

It's been years since I used Solaris, so I cannot give you the
most modern of answers. The traditional answer would be to use
Weitse's "tcp wrappers" if the idea is to be selective about who
you will accept. If you want to turn off the service to clients
entirely during those time ranges, you could have a cron tab entry
stopped the service or which commented it in/out of inetd.conf

-- 
Any sufficiently old bug becomes a feature.


Relevant Pages