<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">I don’t see any iptables rules posted in this thread. Did I miss them?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Are you sure your outbound traffic to port 3306 on hostB NIC1 is going out hostA NIC1 and not out hostA NIC2? If you do tcpdump on hostB NIC1 do you see any
attempts to reach the port? How are you verifying access is failing?<br>
<br>
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Is it possible MySQL itself has a security setting prohibiting hostA NIC2’s IP? On our Oracle installations we have to be sure Oracle has been configured
to allow connections from specific servers or IPs on top of doing iptables rules.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Ale [mailto:ale-bounces@ale.org]
<b>On Behalf Of </b>Dustin Strickland via Ale<br>
<b>Sent:</b> Friday, January 26, 2018 1:28 PM<br>
<b>To:</b> Phil Turmel; Atlanta Linux Enthusiasts<br>
<b>Subject:</b> Re: [ale] iptables issues with dual NIC'd hosts?<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Disregard, I misread the issue. I'm stumped<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On Jan 26, 2018 12:26 PM, "Dustin Strickland" <<a href="mailto:dustin.h.strickland@gmail.com">dustin.h.strickland@gmail.com</a>> wrote:<o:p></o:p></p>
<div>
<p class="MsoNormal">What interface is MySQL listening on<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On Jan 26, 2018 12:21 PM, "Phil Turmel via Ale" <<a href="mailto:ale@ale.org" target="_blank">ale@ale.org</a>> wrote:<o:p></o:p></p>
<p class="MsoNormal">On 01/26/2018 01:01 PM, leam hall via Ale wrote:<br>
> Using RHEL 6, two hosts (A, B) each with two NICs, Each host has one<br>
> NIC on each of two VLANs. Tomcat on Host_A rying to connect to MySQL<br>
> on Host_B, port 3306. iptables on Host_B looks open (0.0.0.0) for<br>
> TCP/3306.<br>
><br>
> Host_A_NIC_0 can connect to Host_B_NIC_0 TCP/3306<br>
> HOST_A_NIC_1 can NOT connect to HOST_B_NIC_1 TCP/3306.<br>
><br>
> They are 1 IP off and NIC_1 can ping NIC_1, but not connect TCP/3306.<br>
><br>
> Thoughts on how to figure out why when iptables looks open?<br>
<br>
I don't see any flaw in the iptables rules you posted. /-:<br>
_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org" target="_blank">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
</body>
</html>