if the main server is up, the CSS will use it over the sorry_server.

You can't tell the CSS not to use it if it is UP.

Therefore, the only solution is to find a way to keep your main server down once it fails a keepalive.

This can be done with a script that would issue the command 'suspend' once it detects the service missed a keepalive.

The script can be a tcp keepalive script and instead of returning just a failure one the server is down, the script itself can generate the 'suspend' command.

So, you then have time to sync your database and when ready you can do an 'active' under the service to start using it again.

Gilles.