Demiurgo
07/11/2014, 17:09
ey, gracias!, me sonaba que había que abrir puertos y añadir ips pero no recordaba cuales ... ya podrían poner el link dentro de la wiki del rtm ... porque no lo explica y la verdad es que te deja a ciegas
If you want to block the ICMP protocol (Ping requests), you have to let at least ping.ovh.net, proxy.p19.ovh.net, proxy.rbx.ovh.net, proxy.ovh.net and proxy.rbx2.ovh.net to ping your server. It enables to OVH teams to check the status of your server.
In addition, you have to let the Ip address as the following example:
The Ip address of your server is aaa.bbb.ccc.ddd You have to pass: aaa.bbb.ccc.250 Example: 213.186.57.153 must pass 213.186.57.250 for the SLA server and 213.186.57.251 for the MRTG server so that it can use the RTM.
If you block all ping requests as well as Ovh's requests, we won't be able to check the state of your server and if a problem occurs, we won't be informed. To authorize ping from our servers, type the following rules:
Código:/sbin/iptables -A INPUT -i eth0 -p icmp --source proxy.ovh.net -j ACCEPT /sbin/iptables -A INPUT -i eth0 -p icmp --source proxy.p19.ovh.net -j ACCEPT /sbin/iptables -A INPUT -i eth0 -p icmp --source proxy.rbx.ovh.net -j ACCEPT /sbin/iptables -A INPUT -i eth0 -p icmp --source proxy.sbg.ovh.net -j ACCEPT /sbin/iptables -A INPUT -i eth0 -p icmp --source proxy.bhs.ovh.net -j ACCEPT /sbin/iptables -A INPUT -i eth0 -p icmp --source ping.ovh.net -j ACCEPT /sbin/iptables -A INPUT -i eth0 -p icmp --source IP.250 -j ACCEPT # IP = aaa.bbb.ccc according to the previous rule /sbin/iptables -A INPUT -i eth0 -p icmp --source IP.251 -j ACCEPT # IP = aaa.bbb.ccc according to the previous rule