Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 2 subscribers
  • Views 2160 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Drop all current established connections

streetfox
Hi there

is it possible to add a button to drop all remembered connections in case of emergency? I remember this was possible years ago, with astaro vBaby I think ;-)

How is it possible now? I dont want to reboot the system just make a clean cut of the connection tracking table.

Thanks a lot for your help
Cheers


This thread was automatically locked due to age.
Parents
  • 0
    On Fedora, you can do
    service iptables panic

    This flushes the rules and, I believe, all connections, but it also shuts down all rules. i.e. you would no longer be able to remotely control the firewall.

    I suspect the iptables commands that executes would also work on ASL (from ssh).

    You would then need to force the configured rules to reload.

    The middleware _might_ re-load the iptables config automatically, but I don't know how often it checks things.

    Perhaps killing the mdw daemon would do the trick?

    Of course, none of this would be supported by Astaro. 

    Barry
Reply
  • 0
    On Fedora, you can do
    service iptables panic

    This flushes the rules and, I believe, all connections, but it also shuts down all rules. i.e. you would no longer be able to remotely control the firewall.

    I suspect the iptables commands that executes would also work on ASL (from ssh).

    You would then need to force the configured rules to reload.

    The middleware _might_ re-load the iptables config automatically, but I don't know how often it checks things.

    Perhaps killing the mdw daemon would do the trick?

    Of course, none of this would be supported by Astaro. 

    Barry
Children
  • 0 in reply to BarryG
     

    Thanks Barry, I will look if someone from astaro gives an advice too. As I said there was the possibility a year ago...I think it was with Astaro V3...do not remeber it...

    I'll try on a test workstation...

    Cheers
    Oliver