Yes, I block them /etc/sysconfig/iptables on torque server and make iptables restart.<div><div><br></div><div>Thanks.</div><div><br></div><div><div class="gmail_quote">On Wed, Feb 18, 2009 at 9:25 AM, Miles O'Neal <span dir="ltr"><<a href="mailto:meo@intrinsity.com">meo@intrinsity.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">Beob Kyun Kim said...<br>
<div class="Ih2E3d"><br>
|I open them only to my worker nodes.<br>
|Of course, 32.247.167.0 is not included in my worker nodes.<br>
|<br>
|I tried to block those ip addresses (32.247.167....) with hosts.deny &<br>
|iptables.<br>
<br>
</div>Are you blocking them at a firewall with iptables,<br>
on on the torque server?<br>
<div><div></div><div class="Wj3C7c"><br>
|When we check traffic related to 32.247.167.., the only related things are<br>
|DNS lookup to DNS service.<br>
|<br>
|Thanks.<br>
|<br>
|kyun<br>
|<br>
|<br>
|On Tue, Feb 17, 2009 at 7:57 PM, Arnau Bria <<a href="mailto:arnaubria@pic.es">arnaubria@pic.es</a>> wrote:<br>
|<br>
|> On Mon, 16 Feb 2009 21:17:17 -0600 (CST)<br>
|> Miles O'Neal wrote:<br>
|><br>
|> > Beob Kyun Kim said...<br>
|> ><br>
|> > |Hi Miles,<br>
|> > |In addition,<br>
|> > |While checking traffic from my cluster, there's no traffic from/to<br>
|> > |32.247.167.0~255.<br>
|> Do you have your pbs port open to world? I don't think so...<br>
|><br>
|> I had a similar problem and someone told me that it was a pbs known<br>
|> issue. Something where pbs puts a random number and then has some kind<br>
|> of DNS sense.<br>
|><br>
|> *Anyway, do your security checks!<br>
|><br>
|> I'll look for that post.<br>
|><br>
|> Cheers,<br>
|> Arnau<br>
|> _______________________________________________<br>
|> torqueusers mailing list<br>
|> <a href="mailto:torqueusers@supercluster.org">torqueusers@supercluster.org</a><br>
|> <a href="http://www.supercluster.org/mailman/listinfo/torqueusers" target="_blank">http://www.supercluster.org/mailman/listinfo/torqueusers</a><br>
|><br>
|<br>
|<br>
|<br>
|--<br>
|--<br>
|Beob Kyun Kim, Ph. D.<br>
|NSDC Team/ Supercomputing Center/ KISTI<br>
|335 Kwahangno, Yuseong-gu, Daejeon, 305-806, South Korea<br>
|<a href="mailto:trugens@gmail.com">trugens@gmail.com</a>, <a href="mailto:kyun@kisti.re.kr">kyun@kisti.re.kr</a><br>
|MSN : <a href="http://trugens@hotmail.com/" target="_blank">trugens@hotmail.com/</a> GTalk : <a href="http://trugens@gmail.com/" target="_blank">trugens@gmail.com/</a> NateOn :<br>
|<a href="mailto:numdle@nate.com">numdle@nate.com</a><br>
|Phone : +82-42-869-0782/ Mobile : +82-10-4422-1584/ Fax : +82-42-869-0789<br>
|<br>
</div></div>|--000e0cd2c0cceb3d0a04632666f3<br>
<div class="Ih2E3d">|Content-Type: text/html; charset=UTF-8<br>
|Content-Transfer-Encoding: quoted-printable<br>
|<br>
</div>|<div>Hi,</div><div><br></div><div>I open them only to my worker nodes.</div=<br>
|><div>Of course, 32.247.167.0 is not included in my worker nodes.</div><div=<br>
|><br></div><div>I tried to block those ip addresses (32.247.167....) with h=<br>
|osts.deny &amp; iptables.</div><br>
|<div><br></div><div>When we check traffic related to 32.247.167.., the only=<br>
| related things are DNS lookup to DNS service.</div><div><br></div><div>Tha=<br>
|nks.</div><div><br></div><div>kyun</div><br><br><div class=3D"gmail_quote"><br>
|On Tue, Feb 17, 2009 at 7:57 PM, Arnau Bria <span dir=3D"ltr">&lt;<a href=<br>
|=3D"mailto:<a href="mailto:arnaubria@pic.es">arnaubria@pic.es</a>"><a href="mailto:arnaubria@pic.es">arnaubria@pic.es</a></a>&gt;</span> wrote:<br><blo=<br>
|ckquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #c=<br>
|cc solid;padding-left:1ex;"><br>
|<div class=3D"Ih2E3d">On Mon, 16 Feb 2009 21:17:17 -0600 (CST)<br><br>
|Miles O&#39;Neal wrote:<br><br>
|<br><br>
|&gt; Beob Kyun Kim said...<br><br>
|&gt;<br><br>
|</div><div class=3D"Ih2E3d">&gt; |Hi Miles,<br><br>
|&gt; |In addition,<br><br>
|&gt; |While checking traffic from my cluster, there&#39;s no traffic from/t=<br>
|o<br><br>
|&gt; |32.247.167.0~255.<br><br>
|</div>Do you have your pbs port open to world? I don&#39;t think so...<br><br>
|<br><br>
|I had a similar problem and someone told me that it was a pbs known<br><br>
|issue. Something where pbs puts a random number and then has some kind<br><br>
|of DNS sense.<br><br>
|<br><br>
|*Anyway, do your security checks!<br><br>
|<br><br>
|I&#39;ll look for that post.<br><br>
|<br><br>
|Cheers,<br><br>
|Arnau<br><br>
|_______________________________________________<br><br>
|torqueusers mailing list<br><br>
|<a href=3D"mailto:<a href="mailto:torqueusers@supercluster.org">torqueusers@supercluster.org</a>">torqueusers@supercluster.or=<br>
|g</a><br><br>
|<a href=3D"<a href="http://www.supercluster.org/mailman/listinfo/torqueusers" target="_blank">http://www.supercluster.org/mailman/listinfo/torqueusers</a>" target=<br>
|=3D"_blank"><a href="http://www.supercluster.org/mailman/listinfo/torqueusers" target="_blank">http://www.supercluster.org/mailman/listinfo/torqueusers</a></a><br=<br>
<div class="Ih2E3d">|><br>
|</blockquote></div><br><br clear=3D"all"><br>-- <br>-- <br>Beob Kyun Kim, P=<br>
|h. D.<br>NSDC Team/ Supercomputing Center/ KISTI<br>335 Kwahangno, Yuseong-=<br>
|gu, Daejeon, 305-806, South Korea<br><a href=3D"mailto:<a href="mailto:trugens@gmail.com">trugens@gmail.com</a>">t=<br>
|<a href="mailto:rugens@gmail.com">rugens@gmail.com</a></a>, <a href=3D"mailto:<a href="mailto:kyun@kisti.re.kr">kyun@kisti.re.kr</a>"><a href="mailto:kyun@kisti.re.kr">kyun@kisti.re.kr</a><=<br>
|/a><br><br>
|MSN : <a href=3D"<a href="http://trugens" target="_blank">http://trugens</a>@<a href="http://hotmail.com/" target="_blank">hotmail.com/</a>"><a href="http://trugens@hotmail.com/" target="_blank">trugens@hotmail.com/</a></a> &nbs=<br>
|p;GTalk : <a href=3D"<a href="http://trugens" target="_blank">http://trugens</a>@<a href="http://gmail.com/" target="_blank">gmail.com/</a>"><a href="http://trugens@gmail.com/" target="_blank">trugens@gmail.com/</a></a> &nbs=<br>
</div>|p;NateOn : <a href=3D"mailto:<a href="mailto:numdle@nate.com">numdle@nate.com</a>"><a href="mailto:numdle@nate.com">numdle@nate.com</a></a><br>Phone =<br>
|: +82-42-869-0782/ &nbsp;Mobile : +82-10-4422-1584/ &nbsp;Fax : +82-42-869-=<br>
|0789<br><br>
|<br>
|<br>
|--000e0cd2c0cceb3d0a04632666f3--<br>
|<br>
|--===============0264760169==<br>
|Content-Type: text/plain; charset="us-ascii"<br>
|MIME-Version: 1.0<br>
|Content-Transfer-Encoding: 7bit<br>
|Content-Disposition: inline<br>
<div class="Ih2E3d">|<br>
|_______________________________________________<br>
|torqueusers mailing list<br>
|<a href="mailto:torqueusers@supercluster.org">torqueusers@supercluster.org</a><br>
|<a href="http://www.supercluster.org/mailman/listinfo/torqueusers" target="_blank">http://www.supercluster.org/mailman/listinfo/torqueusers</a><br>
|<br>
</div>|--===============0264760169==--<br>
<div><div></div><div class="Wj3C7c">|<br>
<br>
<br>
--<br>
Miles O'Neal<br>
<br>
Intrinsity, Inc. | <a href="mailto:meo@intrinsity.com">meo@intrinsity.com</a><br>
11612 Bee Caves Rd. | 512-421-2242 (v)<br>
Bldg II / Suite 200 | 512-577-3133 (c) <- best bet<br>
Austin, Texas 78738 | 512-263-0795 (f)<br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>-- <br>Beob Kyun Kim, Ph. D.<br>NSDC Team/ Supercomputing Center/ KISTI<br>335 Kwahangno, Yuseong-gu, Daejeon, 305-806, South Korea<br><a href="mailto:trugens@gmail.com">trugens@gmail.com</a>, <a href="mailto:kyun@kisti.re.kr">kyun@kisti.re.kr</a><br>
MSN : <a href="http://trugens@hotmail.com/">trugens@hotmail.com/</a> GTalk : <a href="http://trugens@gmail.com/">trugens@gmail.com/</a> NateOn : <a href="mailto:numdle@nate.com">numdle@nate.com</a><br>Phone : +82-42-869-0782/ Mobile : +82-10-4422-1584/ Fax : +82-42-869-0789<br>
</div></div>