[ale] iptables issues with dual NIC'd hosts?

[Lightner, Jeffrey]

I don’t see any iptables rules posted in this thread.   Did I miss them?

Are you sure your outbound traffic to port 3306 on hostB NIC1 is going out hostA NIC1 and not out hostA NIC2?   If you do tcpdump on hostB NIC1 do you see any attempts to reach the port?   How are you verifying access is failing?

Is it possible MySQL itself has a security setting prohibiting hostA NIC2’s IP?   On our Oracle installations we have to be sure Oracle has been configured to allow connections from specific servers or IPs on top of doing iptables rules.

From: Ale [mailto:ale-bounces at ale.org] On Behalf Of Dustin Strickland via Ale
Sent: Friday, January 26, 2018 1:28 PM
To: Phil Turmel; Atlanta Linux Enthusiasts
Subject: Re: [ale] iptables issues with dual NIC'd hosts?

Disregard, I misread the issue. I'm stumped

On Jan 26, 2018 12:26 PM, "Dustin Strickland" <dustin.h.strickland at gmail.com<mailto:dustin.h.strickland at gmail.com>> wrote:
What interface is MySQL listening on

On Jan 26, 2018 12:21 PM, "Phil Turmel via Ale" <ale at ale.org<mailto:ale at ale.org>> wrote:
On 01/26/2018 01:01 PM, leam hall via Ale wrote:
> Using RHEL 6, two hosts (A, B) each with two NICs, Each host has one
> NIC on each of two VLANs. Tomcat on Host_A rying to connect to MySQL
> on Host_B, port 3306. iptables on Host_B looks open (0.0.0.0) for
> TCP/3306.
>
> Host_A_NIC_0 can connect to Host_B_NIC_0 TCP/3306
> HOST_A_NIC_1 can NOT connect to HOST_B_NIC_1  TCP/3306.
>
> They are 1 IP off and NIC_1 can ping NIC_1, but not connect TCP/3306.
>
> Thoughts on how to figure out why when iptables looks open?

I don't see any flaw in the iptables rules you posted.  /-:
_______________________________________________
Ale mailing list
Ale at ale.org<mailto:Ale at ale.org>
http://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.ale.org/pipermail/ale/attachments/20180126/73e75dfb/attachment.html>