Re: Problem behind my DMZ

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> Good evening folks,
>
> Sorry to answer you so late, and thank you for your informations. I'm so
> exited, I have make test and, basicly, it's working. Tomorow is the
> official test. I keep you informed.
>
> The only thing I can't figure out is the /32 netmask address for an address
> having a /28. Why dont put the /28?
>
> Of course I try it but the route program have reject this entries. Can you
> explain to me?
>
> Other thing. It is possible than I can't reach other machine placed before
> the firewall BOX having address IP in the same range than my firewall box
> after having put the /32 host in my route table?
>
> Example:
> 192.168.1.1 ISP GAteway
> 192.168.1.2 Server (Any kind)
> 192.168.1.3 Firewall BOX (Eth0)
> 192.168.1.3 Firewall BOX (eth1)
> 192.168.1.4 Server Behind Firewall BOX
>
> Ping Test result
> ---------------------------
> 192.168.1.4 can reach 192.168.1.3
> 192.168.1.4 can reach 192.168.1.1
> 192.168.1.4 can't reach 192.168.1.2
>
> In the same test
>
> 192.168.1.2 can reach 192.168.1.1
> But not 1.3 and 1.4
>
> I ask that because if I check my DSL route table, I see the same
> configuration like
>
> Destination Gateway Genmask Flags Metric Ref Use
> Iface
> 67.68.140.1 0.0.0.0 255.255.255.255 UH 0 0 0 ppp0
> 192.168.1.1 0.0.0.0 255.255.255.0 U 0 0 0 eth0
> 127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
> 0.0.0.0 67.68.140.1 0.0.0.0 UG 0 0 0 ppp0
>
> I can ping 67.68.140.1, .2, .3, .4, .5, etc....
>
> Can you explain?


Is your IP forwarding turned on?

Yes, it is. Can you explain to me why /32 against /28 netmask, or tell me where I can get the documentation?



> > > Now the configuration :D

Please use the "ip" utility instead of ifconfig/route/arp/... It's much easier
and more powerful...

Ok I will tried, but is not installed by default with slackware. I will search where I can get it.



Ramin

Regards and thanks in advance


Martin

_________________________________________________________________
MSN Search, le moteur de recherche qui pense comme vous ! http://fr.ca.search.msn.com/




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux