Re: Networking Problem

From: Jonathan Barnes (webdwarf_at_jmconline.net)
Date: 07/31/04

  • Next message: Shawn Lamson: "interpreting output of SNORT" 
    Date: Sun, 01 Aug 2004 02:05:51 +1000
To: Matt Perry <matt@primefactor.com>

    Matt Perry wrote:

    > On Sun, 1 Aug 2004, Jonathan Barnes wrote:
    >
    >
    >>my Debian Box. eg: The Firewall can ping my Debian Box, but my Debian
    >>Box can't ping the firewall.
    >
    >
    > It's sounds like IP forwarding isn't working. Take down the interface
    > that uses 10.1.1.1 and then try to ping the firewall. What happens?
    >
    > What is the output when you run "cat /proc/sys/net/ipv4/ip_forward" ?
    > If you get a zero, execute "echo 1 >/proc/sys/net/ipv4/ip_forward" bring
    > up the 10.1.1.1 interface and try things then. Let us know what happens.
    >

    Thanks for your reply,

    After taking down eth1(10.1.1.1) I was still unable to ping anything,
    and ip_forward was already on.

    It's just so weird that it can reply to requests initiated by other
    machines (eg. people checking their mail from the outside) but it cant
    make any requests of its own. Sounds like a statefull firewall problem,
    but as I said, I've tried clearing all iptables rules. And it can't be
    the other firewall because none of the other workstations are affected
    and the problem still exists if I set the IP to be something other than
    10.0.0.2. 

    -- 
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
  • Next message: Shawn Lamson: "interpreting output of SNORT"

    Relevant Pages

    • RE: IP Aliasing
      ... address is shown on the traffic leaving this interface? ... expect to get a response from the primary address of the interface. ... What happens if I ping an alias address, would I get a response from ... IP addresses when machines traverse the NATted firewall. ...
      (freebsd-questions)
    • Re: AD, DHCP or maybe DNS problem?
      ... if I use the firewall it doens't work. ... I already setup several RRAS servers and they work fine, ... but can't use the internet on) below are my pings ... Ping statistics for 127.0.0.1: ...
      (microsoft.public.windows.server.active_directory)
    • Re: PRB:socket api "listen" always fails returning WSAEINVAL and p
      ... WinXP pc is not running any firewall as i have switched off firewall and ... to do with the ping situation, but what you're doing there is wrong. ... No subnet mask and MAC address of the ethernet card both are fine as i am ... ip addrees of the WinXP pc:10.123.4.101 ...
      (microsoft.public.windowsce.app.development)
    • Re: XP Network doesnt allow new computer to access
      ... This machine can ping other one. ... no other machines are visible in My Network Places. ... >> The list of servers for this workgroup is not currently available." ... I've mucked around with the firewall - ...
      (microsoft.public.windowsxp.network_web)
    • Re: [opensuse] Two NICs, one connected, Ping Both...?
      ... Server is behind a Router, and the Router is doing Port Forwarding. ... Only one of these RJ45 Ports is connected, but I can Ping them both. ... Not counting completely broken firewall rules. ... Start by turning off the firewall, double-checking that you are running ssh, and connecting from a localhost. ...
      (SuSE)