RE: Networking question

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I don't have iptables configured to pass ICMP traffic through the firewall,
other than specifically to the inside interface of the router. I can ping
that, and all internal hosts.

========
C:\>ipconfig /all

Windows IP Configuration

        Host Name . . . . . . . . . . . . : xxxxxxxx
        Primary Dns Suffix  . . . . . . . :
        Node Type . . . . . . . . . . . . : Unknown
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Realtek RTL8139/810x Family Fast
Ethernet NIC
        Physical Address. . . . . . . . . : 00-50-FC-4F-F1-B7
        Dhcp Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes
        IP Address. . . . . . . . . . . . : 192.168.2.98
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.2.1
        DHCP Server . . . . . . . . . . . : 192.168.2.2
        Lease Obtained. . . . . . . . . . : December 24, 2005 2:36:55 PM
        Lease Expires . . . . . . . . . . : February 22, 2006 2:36:55 PM
========

========
C:\>route print
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 50 fc 4f f1 b7 ...... Realtek RTL8139 Family PCI Fast Ethernet NIC
- Packet Scheduler Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.2.1    192.168.2.98       20
        127.0.0.0        255.0.0.0        127.0.0.1       127.0.0.1       1
      192.168.2.0    255.255.255.0     192.168.2.98    192.168.2.98       20
     192.168.2.98  255.255.255.255        127.0.0.1       127.0.0.1       20
    192.168.2.255  255.255.255.255     192.168.2.98    192.168.2.98       20
        224.0.0.0        240.0.0.0     192.168.2.98    192.168.2.98       20
  255.255.255.255  255.255.255.255     192.168.2.98    192.168.2.98       1
Default Gateway:       192.168.2.1
===========================================================================
Persistent Routes:
  None
========

-----Original Message-----
From: netfilter-bounces@xxxxxxxxxxxxxxxxxxx
[mailto:netfilter-bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of Edmundo Carmona
Sent: December 24, 2005 2:18 PM
To: netfilter@xxxxxxxxxxxxxxxxxxx
Subject: Re: Networking question

sure.... as long as there's layer three traffic.

Pinging? Pinging hosts in your network? pinging hosts in internet?

What's the output of ipconfig /all and route print? (ugh!!! :-) )

On 12/24/05, Dave Beach <drbeach@xxxxxxxxxx> wrote:
> Yes, and if it were a DNS problem you'd (sorry, *I'd*) think I'd see 
> DNS-related traffic from the XP box. But... Nothing. At all. Zip. Zilch.
> Nada. No web-related traffic whatsoever originating from the XP box 
> when the proxy settings in IE are de-selected.
>
> -----Original Message-----
> From: Edmundo Carmona [mailto:eantoranz@xxxxxxxxx]
> Sent: December 24, 2005 2:06 PM
> To: Dave Beach
> Subject: Re: Networking question
>
> and say... if you ping a host outside of your network, the ping is 
> routed through the GW box?
>
> It could be a DNS problem, because IE will try to resolve a domain 
> name before sending a HTTP request.
>
> On 12/24/05, Dave Beach <drbeach@xxxxxxxxxx> wrote:
> > Thanks for the reply. The default gateway for the internal network 
> > is the firewall box.
> >
> > -----Original Message-----
> > From: netfilter-bounces@xxxxxxxxxxxxxxxxxxx
> > [mailto:netfilter-bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of Edmundo 
> > Carmona
> > Sent: December 24, 2005 1:59 PM
> > To: netfilter@xxxxxxxxxxxxxxxxxxx
> > Subject: Re: Networking question
> >
> > Probably there's no gateway in the XP box setup... or the gateway is 
> > plain wrong.
> >
> > Merry Xorg-mas to everyone around! ;-)
> >
> > On 12/24/05, Dave Beach <drbeach@xxxxxxxxxx> wrote:
> > >
> > > This is undoubtedly off-topic in oh-so-many ways; I'd be quite 
> > > happy to be redirected to another, more appropriate mailing list 
> > > should someone be so kind as to suggest one.
> > >
> > > Internal, home, private network, WinXP boxen and a Squid proxy, 
> > > connecting through an iptables box to my router and cable modem.
> > > Everything works peachy.
> > >
> > > While trying to poke bittorrent holes through my iptables setup (see?
> > > Some vague evidence of relevance), I encountered problems and 
> > > decided to take the proxy out of the picture. VERY much to my 
> > > surprise, when I reconfigured IE to not use the proxy (and 
> > > configured iptables to allow for a direct connection), I see no 
> > > HTTP traffic whatsoever leaving the XP box destined for the 
> > > firewall. In fact, no TCP traffic either (all traffic analysis 
> > > done with ethereal on the XP box). I can ping to/from the XP box, 
> > > and see THAT via
> ethereal.
> > >
> > > I am considerably confused by this. My presumption was that IE 
> > > would just happily send HTTP traffic directly to the firewall, but 
> > > this is NOT the behaviour I'm seeing.
> > >
> > > I know it's Christmas Eve day, and I was out a bit late last 
> > > night, but there's clearly something VERY obvious I'm missing.
> > >
> > >
> > >
> >
> >
> >
>
>



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux