Mailinglist Archive: opensuse (3104 mails)
| < Previous | Next > |
RE: [SLE] Bypassing IPChains
- From: schalk@xxxxxxxxxx (Schalk Klee)
- Date: Wed, 12 Apr 2000 17:40:36 +0200
- Message-id: <34BD40163ED2D21184FF00A0C9CC27160A592A@xxxxxxxxxxxxxxxxx>
Hi,
I assume that the .211 address belongs to another machine. What is the IP
address of the Ethernet side of the router ? Do you use NAT on the Cisco
router or masquirading on the SuSE box (gateway/dialup server)?
What subnet mask are you using and what is the subnet mask that the ISP is
using to route to you? I assume with a 210.x.x.x address you would both be
using 255.255.255.0, but just check with the ISP.
What happens if you set the default gateway on the .212 machine to the cisco
router's IP for the ethernet port ?
Let me know and I will try and assist.
Cheers
Schalk Klee
-----Original Message-----
From: Brevsville Administrator [mailto:Admin@xxxxxxxxxxxxxxxxx]
Sent: 12 April 2000 07:20
To: suse-linux-e; Chris Reeves
Subject: Re: [SLE] Bypassing IPChains
Hi Chris
Thanx for your thoughts. I can ping out to anywhere, but I can't ping back
from
anywhere to teh 212 machine. Traceroute to the x.x.211 machine works fine,
and
that machine is on the inside of the router (cisco 801). But if I traceroute
to x.x.212
it times out on the outside of the router (isp side). This suggests to me
that the ISP
is not routing my complete ip range, but they say they are.,
What next?
TIA
Chris
On Tue, 11 Apr 2000 09:18:57 +0100, Chris Reeves wrote:
>Brevsville Administrator wrote:
>>
>> I have a SuSE 6.3 box operating as a dialup server to the internet. When
the
user
>> dialin they are assigned ip's in the range 192.168.x.x using ipchains to
route
them
>> through our permanent ip of 210.x.x.211. This works perfectly.
>>
>> I have another machine on the local LAN with an IP of 210.x.x.212. From
this
>> machine I can access the internet by setting the 210.x.x.211 machine as
the
>> gateway. This works with no ipchains set.
>>
>> My problem is that from the internet if I dialin from any other isp, I
can ping the
>> 210.x.x.211 gateway, so I know the packets are getting through the
internet and
>> landing inside our network, but I cannot ping the 210.x.x.212 machine.
Something
>> must be blocking it. As I mentioned above I can ping from 212 to the
internet so
it
>> seems my routing is correct, but i can't ping in the reverse (from the
internet to
the
>> 212 machine).
>
>Have you tried doing a traceroute to 212 machine, to see how far the ping
would
>get? This may tell you whether it's reaching the 211 machine or not even
>getting out of the current machine.
>
>Hope that helps,
> Chris
--
To unsubscribe send e-mail to suse-linux-e-unsubscribe@xxxxxxxx
For additional commands send e-mail to suse-linux-e-help@xxxxxxxx
Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/
| < Previous | Next > |