I don't have iptables configured to pass ICMP traffic through the firewall,
other than specifically to the inside interface of the router. I can ping
that, and all internal hosts.
========
C:\>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : xxxxxxxx
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek RTL8139/810x Family Fast
Ethernet NIC
Physical Address. . . . . . . . . : 00-50-FC-4F-F1-B7
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.2.98
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.2.1
DHCP Server . . . . . . . . . . . : 192.168.2.2
Lease Obtained. . . . . . . . . . : December 24, 2005 2:36:55 PM
Lease Expires . . . . . . . . . . : February 22, 2006 2:36:55 PM
========
========
C:\>route print
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 50 fc 4f f1 b7 ...... Realtek RTL8139 Family PCI Fast Ethernet NIC
- Packet Scheduler Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.2.1 192.168.2.98 20
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.2.0 255.255.255.0 192.168.2.98 192.168.2.98 20
192.168.2.98 255.255.255.255 127.0.0.1 127.0.0.1 20
192.168.2.255 255.255.255.255 192.168.2.98 192.168.2.98 20
224.0.0.0 240.0.0.0 192.168.2.98 192.168.2.98 20
255.255.255.255 255.255.255.255 192.168.2.98 192.168.2.98 1
Default Gateway: 192.168.2.1
===========================================================================
Persistent Routes:
None
========
-----Original Message-----
From: netfilter-bounces@xxxxxxxxxxxxxxxxxxx
[mailto:netfilter-bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of Edmundo Carmona
Sent: December 24, 2005 2:18 PM
To: netfilter@xxxxxxxxxxxxxxxxxxx
Subject: Re: Networking question
sure.... as long as there's layer three traffic.
Pinging? Pinging hosts in your network? pinging hosts in internet?
What's the output of ipconfig /all and route print? (ugh!!! :-) )
On 12/24/05, Dave Beach <drbeach@xxxxxxxxxx> wrote:
> Yes, and if it were a DNS problem you'd (sorry, *I'd*) think I'd see
> DNS-related traffic from the XP box. But... Nothing. At all. Zip. Zilch.
> Nada. No web-related traffic whatsoever originating from the XP box
> when the proxy settings in IE are de-selected.
>
> -----Original Message-----
> From: Edmundo Carmona [mailto:eantoranz@xxxxxxxxx]
> Sent: December 24, 2005 2:06 PM
> To: Dave Beach
> Subject: Re: Networking question
>
> and say... if you ping a host outside of your network, the ping is
> routed through the GW box?
>
> It could be a DNS problem, because IE will try to resolve a domain
> name before sending a HTTP request.
>
> On 12/24/05, Dave Beach <drbeach@xxxxxxxxxx> wrote:
> > Thanks for the reply. The default gateway for the internal network
> > is the firewall box.
> >
> > -----Original Message-----
> > From: netfilter-bounces@xxxxxxxxxxxxxxxxxxx
> > [mailto:netfilter-bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of Edmundo
> > Carmona
> > Sent: December 24, 2005 1:59 PM
> > To: netfilter@xxxxxxxxxxxxxxxxxxx
> > Subject: Re: Networking question
> >
> > Probably there's no gateway in the XP box setup... or the gateway is
> > plain wrong.
> >
> > Merry Xorg-mas to everyone around! ;-)
> >
> > On 12/24/05, Dave Beach <drbeach@xxxxxxxxxx> wrote:
> > >
> > > This is undoubtedly off-topic in oh-so-many ways; I'd be quite
> > > happy to be redirected to another, more appropriate mailing list
> > > should someone be so kind as to suggest one.
> > >
> > > Internal, home, private network, WinXP boxen and a Squid proxy,
> > > connecting through an iptables box to my router and cable modem.
> > > Everything works peachy.
> > >
> > > While trying to poke bittorrent holes through my iptables setup (see?
> > > Some vague evidence of relevance), I encountered problems and
> > > decided to take the proxy out of the picture. VERY much to my
> > > surprise, when I reconfigured IE to not use the proxy (and
> > > configured iptables to allow for a direct connection), I see no
> > > HTTP traffic whatsoever leaving the XP box destined for the
> > > firewall. In fact, no TCP traffic either (all traffic analysis
> > > done with ethereal on the XP box). I can ping to/from the XP box,
> > > and see THAT via
> ethereal.
> > >
> > > I am considerably confused by this. My presumption was that IE
> > > would just happily send HTTP traffic directly to the firewall, but
> > > this is NOT the behaviour I'm seeing.
> > >
> > > I know it's Christmas Eve day, and I was out a bit late last
> > > night, but there's clearly something VERY obvious I'm missing.
> > >
> > >
> > >
> >
> >
> >
>
>
