Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.networking > #1264

Re: linux as multi-port (subnet) router using Ubuntu 11.10 server

From lincy <lincylin@gmail.com>
Newsgroups comp.os.linux.networking
Subject Re: linux as multi-port (subnet) router using Ubuntu 11.10 server
Date 2012-04-09 23:40 -0700
Organization http://groups.google.com
Message-ID <21041448.21.1334040002494.JavaMail.geo-discussion-forums@pbso10> (permalink)
References (11 earlier) <23753461.82.1333978858232.JavaMail.geo-discussion-forums@pbvy6> <jlvbm4$u16$1@saria.nerim.net> <16433470.0.1334001361795.JavaMail.geo-discussion-forums@pbcio9> <jlvkk1$1182$1@saria.nerim.net> <jm0hvq$a3f$1@dont-email.me>

Show all headers | View raw

Tauno Voipio於 2012年4月10日星期二UTC+8下午1時55分06秒寫道：
> On 10.4.12 12:33 , Pascal Hambourg wrote:
> > lincy a écrit :
> >> Pascal Hambourg wrote :
> >>> It cannot possibly be an issue with some iptables rule, as iptables-save
> >>> showed no rule at all.
> >>
> >> I meaning I am try&error to type iptable rule from command line to test it.
> >
> > You should not need any iptables rules if everything else is setup
> > correctly.
> >
> >>> So the echo request is forwarded, but no reply ever comes back.
> >>> I can see only two explanations :
> >>> - host 192.168.3.51 default route is misconfigured or missing
> >>> - or it has a firewall which drops requests from other subnets.
> >>
> >> The default route of 192.168.3.51 was 192.168.3.1
> >
> > Looks good.
> >
> >> I am guess the kernel drop something too. But I don't know why.
> >> Because the iptable rule are empty.
> >
> > It cannot be iptables nor the IP stack. Incoming packets are captured by
> > tcpdump before iptables and the IP stack can see them. The only part of
> > the kernel which could drop the packets before tcpdump can see them is
> > the ethernet driver.
> >
> >> This 4ports linux box was hard to setup more then internet firewall
> >> box.>_<
> >
> > There is nothing difficult to setup : just IP settings on each interface
> > and enable IP forwarding.
> >
> >> Firewall rule to reject all then accept what you want was easy understand.
> >
> > You do not need any filtering rules. Just leave everything open.
> >
> >> This machine no any rule, all chain was accept. I can't understand
> >> where to drop/reject/block package. so this box don't work as I expected.
> >
> > My guess is the problem lies in the firewall or IP setup on the hosts,
> > not on the router box.
> 
> There is a strong smell of Windows 'firewalling' off networks
> that are not own. Is there such a 'security feature' in Windows
> that it will respond to pings from local network only?
> 
> Which version/flavour or Windows?
> 

Windows 7

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-08 05:50 -0700
  Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2012-04-08 17:16 +0300
    Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-08 08:26 -0700
      Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-08 08:47 -0700
        Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-04-08 18:13 +0200
          Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-08 09:24 -0700
            Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-04-08 18:31 +0200
              Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-08 09:44 -0700
                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-04-08 19:54 +0200
                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-08 17:13 -0700
                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-04-09 10:45 +0200
                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-09 06:40 -0700
                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-04-09 21:01 +0200
                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-09 12:56 -0700
                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-04-09 23:33 +0200
                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2012-04-10 08:55 +0300
                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-09 23:40 -0700
                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2012-04-10 14:39 +0300
                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-10 08:22 -0700
                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2012-04-08 21:13 +0300
                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-04-08 20:48 +0200
                Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-08 17:25 -0700

csiph-web