RE: PPP Dial-out on ipchains Linux system - More information

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




On 25-Jun-2001 Edouard Soriano wrote:
> b) When calling a remote PPP Server, PPP link uses two IP
> address of different network. Example:
> 
> After a PPP connection from my system to a remote PPP NT server
> I got this configuration:
> 
> local IP address: 192.168.75.30
> remote IP address 192.168.165.8
> 
> ping to 192.168.75.30 works fine
> ping to 192.168.165.8 doesn't

Do you have route to net/host 192.168.165.8? If not, add route with
route add 192.168.165.8 dev ppp0
where ppp0 can be ppp1 if you use second ppp interface.
or add defaultroute option to /etc/ppp/options or on the command line for
pppd.

> Connecting a Linux PPP Server
> Works fine.
> 
> Connecting a PPP Server used as router to reach Linux system
> on local LAN
> 
> Means:
> 
> <--- My LAN ----> My Dial-out box ----> Other PPP Server ---> Linux System

Can you tell IP addresses of these boxes?

> Assume Other PPP Server is correctly configured, means has the routes
> to reach any system on My LAN as well as the default route for 
> Linux System is Other PPP Server
> 
> Connection goeas well, even for those Other PPP Server using PAP.
> 
> Problem is I can't ping Other PP Server nor Linux System.

Again, add route to them.

> This is my ipchains status:
> 
># ipchains -L -v
> Chain input (policy ACCEPT: 1344758 packets, 420583373 bytes):
> Chain forward (policy DENY: 625 packets, 72407 bytes):
                              ^^^          ^^^^^
Where is output chain?

If you want routing you must enable forwarding (ipchains -P forward accept)

>  pkts bytes target     prot opt    tosa tosx  ifname     mark       
> outsize  source                destination           ports
>     0     0 MASQ       all  ------ 0xFF 0x00  eth0                        
>    anywhere             anywhere              n/a
>     0     0 MASQ       all  ------ 0xFF 0x00  ppp0                        
>    anywhere             anywhere              n/a
>     0     0 MASQ       all  ------ 0xFF 0x00  ppp1                        
>    anywhere             anywhere              n/a

You have two ppp interfaces?
 
> When I esatblish a PPP Out connection:
> 
> local  IP address 192.168.1.199
> remote IP address 142.4.0.252
> 
> ifconfig:
> ppp0      Link encap:Point-to-Point Protocol  
>           inet addr:192.168.1.199  P-t-P:142.4.0.252  
> Mask:255.255.255.255
>           UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1522  Metric:1
>           RX packets:20 errors:1 dropped:0 overruns:0 frame:1
>           TX packets:21 errors:0 dropped:0 overruns:0 carrier:0
>           collisions:0 txqueuelen:10 
> 
> netstat -nra:
> Destination     Gateway         Genmask         Flags   MSS Window  irtt 
> Iface
> 142.4.0.252     0.0.0.0         255.255.255.255 UH        0 0          0 
> ppp0
> 192.168.2.0     0.0.0.0         255.255.255.0   U         0 0          0 
> eth0
> 192.168.1.0     0.0.0.0         255.255.255.0   U         0 0          0 
> eth1
> 142.1.0.0       0.0.0.0         255.255.255.0   U         0 0          0 
> ppp0
> 127.0.0.0       0.0.0.0         255.0.0.0       U         0 0          0 
> lo
> 0.0.0.0         192.168.2.11    0.0.0.0         UG        0 0          0 
> eth0
> 
> traceroute 142.1.0.4
> traceroute -n 142.1.0.4
> traceroute to 142.1.0.4 (142.1.0.4), 30 hops max, 38 byte packets
>  1  192.168.2.11  0.737 ms  0.713 ms  0.478 ms
>  2  194.38.82.30  61.897 ms  86.457 ms  62.746 ms
>  3  195.202.192.241  63.708 ms  62.083 ms  63.037 ms
>  4  195.202.192.237  63.733 ms  65.720 ms  63.966 ms
>  5  194.38.74.153  96.650 ms  87.651 ms  74.909 ms
>  6  *
> 
> Problem is my request to 142.1.0.4 is going out using the Default Gateway
> of My Dial-out box rather than using ppp0 connection.

Add route to to 142.1.0.4
route add 142.1.0.4 dev ppp0

N.B. I didn't understood quite well your network setup and if you want better
"support" try to explain in more concise and precise way (at least for us
non-native English speakers).

Regards, Milan
----------------------------------
OSS, IT Security
Consulting and Management
----------------------------------
-
: send the line "unsubscribe linux-net" in
the body of a message to majordomo@vger.kernel.org


[Index of Archives]     [Netdev]     [Ethernet Bridging]     [Linux 802.1Q VLAN]     [Linux Wireless]     [Kernel Newbies]     [Security]     [Linux for Hams]     [Netfilter]     [Git]     [Bugtraq]     [Yosemite News and Information]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux PCI]     [Linux Admin]     [Samba]

  Powered by Linux