On 05/24/2011 10:19 PM, JD wrote: > On 05/24/11 18:45, Kevin J. Cummings wrote: >> Does "xp1" have an IP address? >> >> If yes, does Fedora know about it? > xp1 and win7 are both listed in /etc/hosts. > So yes, they have IP addresses :) :) You didn't explicitly list them. Can I assume that they are: win7 192.168.1.1 fedora 192.168.1.2 xp1 192.168.1.3 router 192.168.1.254 ? Are these all DCHP assigned from the router? or static? If dynamic, the router will also probably help set up your routing tables as well.... (and possibly your DNS stuff as well....) >> Can the XP machine successfully ping either win7 or fedora? > XP1 can ping win7 and can ping router, but cannot ping fedora. Strange! Could be firewall related.... > win7 cannot ping either win7 or fedora. It's firewall rules ??? xp1 can ping win7, but win7 cannot ping win7??? And win7 cannot ping fedora? I must confess, I don't know that much about win7, but that seems strange. > fully allow icmp in private+public+domain mode. Does traceroute tell you anything about the network routing? (BTW, Microsoft spells traceroute: tracert) Usually, if you have the proper routing, it will tell you how it connects. My laptop connects to every machine on my LAN directly (only 1 hop), even though the laptop is connected to the router with the wlan, and the other machines directly with the wired network. And my network is particularly convoluted: ISP <-> ISP wireless-router <-> linksys wireless router (2 linux servers wired directly, third cable goes to a 4 port switch, one of which goes to my son's XP, another goes to another switch with 2 more XP machines and an HP printer on it). All of my linksys-wireless and the wired connections use the same 192.168.6 network. Microsoft has a tendency for each new OS to try and supersede the previous wrt Microsoft networking control (netbios stuff). > Fedora has these rules pertaining to the LAN: > > -A INPUT -p icmp --icmp-type 0 -s 192.168.1.0/24 -d 0/0 -m state --state > ESTABLISHED,RELATED -j ACCEPT > -A INPUT -s 192.168.1.0/24 -p tcp -m tcp --dport 137 -j ACCEPT > -A INPUT -s 192.168.1.0/24 -p udp -m udp --dport 137 -j ACCEPT > -A INPUT -s 192.168.1.0/24 -p tcp -m tcp --dport 138 -j ACCEPT > -A INPUT -s 192.168.1.0/24 -p udp -m udp --dport 138 -j ACCEPT > -A INPUT -s 192.168.1.0/24 -p tcp -m tcp --dport 139 -j ACCEPT > -A INPUT -s 192.168.1.0/24 -p udp -m udp --dport 139 -j ACCEPT > -A INPUT -s 192.168.1.0/24 -p tcp -m tcp --dport 445 -j ACCEPT > -A INPUT -s 192.168.1.0/24 -p udp -m udp --dport 445 -j ACCEPT > -A INPUT -s 192.168.1.0/24 -p tcp -m tcp --dport 631 -j ACCEPT > -A INPUT -s 192.168.1.0/24 -p udp -m udp --dport 631 -j ACCEPT 631 is the CUPS printing stuff. The rest of those are Microsoft only services. Maybe Samba (smbd/nmbd) will make use of them. Are you running samba on your fedora machine? > -A OUTPUT -d 192.168.1.0/24 -j ACCEPT > -A OUTPUT -p icmp --icmp-type 8 -s 0/0 -d 0/0 -m state --state > NEW,ESTABLISHED,RELATED -j ACCEPT > > Perhaps the 2nd output rule is redundant, but I had to make sure that > ping were not blocked in or out. If you can ping the router without them, you don't need them. >> I'd start by comparing IP addresses on all three machines and checking >> to see that they all think they are on the "same" network. > Checked. IP addresses are all in sync. OK. >> Second I'd check the routing tables on all 3 machines to ensure that >> they are all consistent. > Win7 routing table: > IPv4 Route Table > =========================================================================== > Active Routes: > Network Destination Netmask Gateway Interface Metric > 0.0.0.0 0.0.0.0 192.168.1.254 192.168.1.1 276 > 127.0.0.0 255.0.0.0 On-link 127.0.0.1 306 > 127.0.0.1 255.255.255.255 On-link 127.0.0.1 306 > 127.255.255.255 255.255.255.255 On-link 127.0.0.1 306 > 192.168.1.0 255.255.255.0 On-link 192.168.1.1 276 > 192.168.1.1 255.255.255.255 On-link 192.168.1.1 276 > 192.168.1.255 255.255.255.255 On-link 192.168.1.1 276 > 224.0.0.0 240.0.0.0 On-link 127.0.0.1 306 > 224.0.0.0 240.0.0.0 On-link 192.168.1.1 276 > 255.255.255.255 255.255.255.255 On-link 127.0.0.1 306 > 255.255.255.255 255.255.255.255 On-link 192.168.1.1 276 > =========================================================================== > Persistent Routes: > Network Address Netmask Gateway Address Metric > 0.0.0.0 0.0.0.0 192.168.1.254 Default > > > xp1 routing table: > ===========================================================================^M > ===========================================================================^M > Active Routes: > Network Destination Netmask Gateway Interface Metric > 0.0.0.0 0.0.0.0 192.168.1.254 > 192.168.1.3 25 > 127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1 > 192.168.1.0 255.255.255.0 192.168.1.3 > 192.168.1.3 25 > 192.168.1.3 255.255.255.255 127.0.0.1 > 127.0.0.1 25 > 192.168.1.255 255.255.255.255 192.168.1.3 > 192.168.1.3 25 > 224.0.0.0 240.0.0.0 192.168.1.3 > 192.168.1.3 25^M > 255.255.255.255 255.255.255.255 192.168.1.3 192.168.1.3 1 > 255.255.255.255 255.255.255.255 192.168.1.3 3 1 > Default Gateway: 192.168.1.254 > ===========================================================================^M > > > Fedora routing table: > netstat -nr > Kernel IP routing table > Destination Gateway Genmask Flags MSS Window irtt > Iface > 0.0.0.0 192.168.1.254 0.0.0.0 UG 0 0 0 > wlan0 > 169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 > wlan0 > 192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 > wlan0 wlan0??? You didn't mention this before (but its the same as I am using from my laptop). I have 3 XP machines on my home network, and I have no problems pinging them (though they don't seem to respond to traceroute!) Either way, and I have 2 linux servers (wired) that the XP machines can ping as well as my laptop. >> Can all 3 machines get to the internet (though what I am guessing is a >> common router) > All 3 machines can indeed use the public net via same router. Have you tried the ping tests after turning off your fedora firewall (iptables)? Are they any better or do they still fail? What about turning off your XP firewall, just to test the pinging? -- Kevin J. Cummings kjchome@xxxxxxxxxxx cummings@xxxxxxxxxxxxxxxxxx cummings@xxxxxxxxxxxxxxxxxxxxxxx Registered Linux User #1232 (http://counter.li.org) -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines