Virtual TapeServer 6.04.01 Installation Guide

104 | Enabling Instant DR and AutoCopy
• -A INPUT -i eth1 -j REJECT --reject-with icmp-port-unreachable
Rejects all traffic with the exception of the preceding rules.
• -A INPUT -p tcp -m state --state INVALID -j REJECT
--reject-with icmp-port-unreachable
Sends a rejected notification to the invalid sender. You can change REJECT to DROP
to drop the traffic without a rejection notification. Note that this should be entered on
one line.
• COMMIT
Causes the preceding commands to take effect.
3. Save and close the file.
4. Enter the following commands:
chkconfig iptables on
service iptables start
At this point, all TCP/IP traffic is blocked except for SSH, RSH, and ICMP (ping and
traceroute) traffic.
5. Repeat these steps on each VTS server.
Now, complete the configuration steps described in the Virtual TapeServer Operations and
Administration Guide.