Hi! I wonder: Does there exist some RA to add/remove iptables rules? A quick check just brought up these: /usr/lib/ocf/resource.d/heartbeat/IPaddr2 /usr/lib/ocf/resource.d/heartbeat/portblock Regards, Ulrich