Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.os.linux.networking > #1267
| From | Tauno Voipio <tauno.voipio@notused.fi.invalid> |
|---|---|
| Newsgroups | comp.os.linux.networking |
| Subject | Re: linux as multi-port (subnet) router using Ubuntu 11.10 server |
| Date | 2012-04-10 14:39 +0300 |
| Organization | A noiseless patient Spider |
| Message-ID | <jm164r$e1k$1@dont-email.me> (permalink) |
| References | (12 earlier) <jlvbm4$u16$1@saria.nerim.net> <16433470.0.1334001361795.JavaMail.geo-discussion-forums@pbcio9> <jlvkk1$1182$1@saria.nerim.net> <jm0hvq$a3f$1@dont-email.me> <21041448.21.1334040002494.JavaMail.geo-discussion-forums@pbso10> |
On 10.4.12 9:40 , lincy wrote: > Tauno Voipio於 2012年4月10日星期二UTC+8下午1時55分06秒寫道： >> On 10.4.12 12:33 , Pascal Hambourg wrote: >>> lincy a écrit : >>>> Pascal Hambourg wrote : >>>>> It cannot possibly be an issue with some iptables rule, as iptables-save >>>>> showed no rule at all. >>>> >>>> I meaning I am try&error to type iptable rule from command line to test it. >>> >>> You should not need any iptables rules if everything else is setup >>> correctly. >>> >>>>> So the echo request is forwarded, but no reply ever comes back. >>>>> I can see only two explanations : >>>>> - host 192.168.3.51 default route is misconfigured or missing >>>>> - or it has a firewall which drops requests from other subnets. >>>> >>>> The default route of 192.168.3.51 was 192.168.3.1 >>> >>> Looks good. >>> >>>> I am guess the kernel drop something too. But I don't know why. >>>> Because the iptable rule are empty. >>> >>> It cannot be iptables nor the IP stack. Incoming packets are captured by >>> tcpdump before iptables and the IP stack can see them. The only part of >>> the kernel which could drop the packets before tcpdump can see them is >>> the ethernet driver. >>> >>>> This 4ports linux box was hard to setup more then internet firewall >>>> box.>_< >>> >>> There is nothing difficult to setup : just IP settings on each interface >>> and enable IP forwarding. >>> >>>> Firewall rule to reject all then accept what you want was easy understand. >>> >>> You do not need any filtering rules. Just leave everything open. >>> >>>> This machine no any rule, all chain was accept. I can't understand >>>> where to drop/reject/block package. so this box don't work as I expected. >>> >>> My guess is the problem lies in the firewall or IP setup on the hosts, >>> not on the router box. >> >> There is a strong smell of Windows 'firewalling' off networks >> that are not own. Is there such a 'security feature' in Windows >> that it will respond to pings from local network only? >> >> Which version/flavour or Windows? >> > > Windows 7 I refuse to touch anything newer than XP. Someone else? -- Tauno Voipio
Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-08 05:50 -0700
Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2012-04-08 17:16 +0300
Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-08 08:26 -0700
Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-08 08:47 -0700
Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-04-08 18:13 +0200
Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-08 09:24 -0700
Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-04-08 18:31 +0200
Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-08 09:44 -0700
Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-04-08 19:54 +0200
Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-08 17:13 -0700
Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-04-09 10:45 +0200
Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-09 06:40 -0700
Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-04-09 21:01 +0200
Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-09 12:56 -0700
Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-04-09 23:33 +0200
Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2012-04-10 08:55 +0300
Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-09 23:40 -0700
Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2012-04-10 14:39 +0300
Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-10 08:22 -0700
Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2012-04-08 21:13 +0300
Re: linux as multi-port (subnet) router using Ubuntu 11.10 server Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-04-08 20:48 +0200
Re: linux as multi-port (subnet) router using Ubuntu 11.10 server lincy <lincylin@gmail.com> - 2012-04-08 17:25 -0700
csiph-web