Mailinglist Archive: opensuse (3104 mails)

< Previous Next >
Re: [SLE] Bypassing IPChains
  • From: Admin@xxxxxxxxxxxxxxxxx (Brevsville Administrator)
  • Date: Tue, 11 Apr 2000 22:20:12 -0700
  • Message-id: <MDAEMON-F200004112217.AA171614md50000052469@xxxxxxxxxx>

Hi Chris

Thanx for your thoughts. I can ping out to anywhere, but I can't ping back from
anywhere to teh 212 machine. Traceroute to the x.x.211 machine works fine, and
that machine is on the inside of the router (cisco 801). But if I traceroute to x.x.212
it times out on the outside of the router (isp side). This suggests to me that the ISP
is not routing my complete ip range, but they say they are.,

What next?



On Tue, 11 Apr 2000 09:18:57 +0100, Chris Reeves wrote:

>Brevsville Administrator wrote:
>> I have a SuSE 6.3 box operating as a dialup server to the internet. When the
>> dialin they are assigned ip's in the range 192.168.x.x using ipchains to route
>> through our permanent ip of 210.x.x.211. This works perfectly.
>> I have another machine on the local LAN with an IP of 210.x.x.212. From this
>> machine I can access the internet by setting the 210.x.x.211 machine as the
>> gateway. This works with no ipchains set.
>> My problem is that from the internet if I dialin from any other isp, I can ping the
>> 210.x.x.211 gateway, so I know the packets are getting through the internet and
>> landing inside our network, but I cannot ping the 210.x.x.212 machine.
>> must be blocking it. As I mentioned above I can ping from 212 to the internet so
>> seems my routing is correct, but i can't ping in the reverse (from the internet to
>> 212 machine).
>Have you tried doing a traceroute to 212 machine, to see how far the ping would
>get? This may tell you whether it's reaching the 211 machine or not even
>getting out of the current machine.
>Hope that helps,
> Chris

To unsubscribe send e-mail to suse-linux-e-unsubscribe@xxxxxxxx
For additional commands send e-mail to suse-linux-e-help@xxxxxxxx
Also check the FAQ at

< Previous Next >