similar to: Linux traceroute (oddness & localhost memory-alloc)

Hi, I am setting up a firewall on CENTOS 4.4. I have done default block iptables -P INPUT DROP iptables -P FORWARD DROP iptables -P OUTPUT DROP I have enabled ICMP to www.google.com iptables -A OUTPUT -p icmp -d 64.233.189.104 -j ACCEPT iptables -A INPUT -p icmp -s 64.233.189.104 -j ACCEPT Ping works fine as below [root at firebox rc.d]# ping 64.233.189.104 PING 64.233.189.104 (

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, I've got this strange thing: I setup a openvpn link between two openwrts. NetA: 192.168.2.0/24 NetB: 192.168.0.0/24 In netA there is a mail server + DNS: 192.168.2.44, with domain name branch.abc.com In netB there is a mail server + DNS: 192.168.0.44, with domain name abc.com I setup both DNS server to be a slave server of each other

My Linux workstation (Mandrake 10.1 kernel 2.6.8.1) is dual-homed to two ADSL Internet providers. Card eth0 (192.168.9.250) is the default route and leads to an SMC router (192.168.9.254). Card eth1 (192.168.1.250) leads to a Linksys router (192.168.1.1). I''m not doing any NAT or PPPoE in the workstation - the SMC and Linksys handle it all. I know four commands that let you set an IP

Neil, Doesn't look like my original message made it to the mailing list so here you are. ---------- Forwarded Message ---------- Subject: Re: Fwd: [CentOS] HOW to enable traceroute with IPTABLES Date: Sat February 17 2007 10:07 From: Robert Spangler <lazydog at zoominternet.net> To: CentOS mailing list <centos at centos.org> On Sat February 17 2007 03:11, Indunil Jayasooriya

hello there, im running a 3interface inet, dmz, loc. i have some public ip addresses. one public address is the router of the provider, the second one is the linux box running shorewall. all other public interfaces are on the dmz nic with proxy-arp. now whenever i do a traceroute (the dmz boxes are windows, icmp traceroute) the very first hop gets timeout/stars, then the router of the provider

Hello, I''m having a very strange problem concerning traceroute and routing and didn''t know if lartc or netfilter would be the correct choice for asking. (so sorry if my question is misplaced) I have the following setup: public ip -- gw1 -- 172.16.0.1 --- 172.16.0.2/and public ip''s --- gw2 --- switch --users (public and private ip addresses; ip-user-pub) from the

CentOS Errata and Enhancement Advisory 2011:0469 Upstream details at : http://rhn.redhat.com/errata/RHBA-2011-0469.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 8d044975056f6e1f7485a62cd8309f49 traceroute-2.0.1-6.el5.i386.rpm Source: 12a273e76a16f11869981bde05d35831 traceroute-2.0.1-6.el5.src.rpm -- Johnny Hughes

CentOS Errata and Enhancement Advisory 2011:0469 Upstream details at : http://rhn.redhat.com/errata/RHBA-2011-0469.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 55faf2478a5db7379ef455523f2e0cad traceroute-2.0.1-6.el5.x86_64.rpm Source: 12a273e76a16f11869981bde05d35831 traceroute-2.0.1-6.el5.src.rpm -- Johnny

CentOS Errata and Bugfix Advisory 2011:0469 Upstream details at : https://rhn.redhat.com/errata/RHBA-2011-0469.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: f6e26bd969eaa53861500b22804f140a traceroute-2.0.1-6.el5.i386.rpm Source: a44d3ee8852b4931e777680e97602cc4 traceroute-2.0.1-6.el5.src.rpm -- Karanbir Singh

CentOS Errata and Bugfix Advisory 2011:0469 Upstream details at : https://rhn.redhat.com/errata/RHBA-2011-0469.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 9b2f0df9e44e596cec2585e413847f8d traceroute-2.0.1-6.el5.x86_64.rpm Source: a44d3ee8852b4931e777680e97602cc4 traceroute-2.0.1-6.el5.src.rpm -- Karanbir

Hi you all guys/girls from this list, I almost never use email lists, but this problem is driving me crazy. I use shorewall for a long time ( since version 1.2.x) but now I use it where I work, and here we now have 4 different ISP for redundance and because it''s cheaper then 1 ISP and a bigger link. 3 of 4 ISP I have no problems, but on the 4th ISP here goes my problem : I have a

How do I allow traceroute to reach my server? Pings work fine but traceroute stops at the last hop before my server. If I shut off the firewall it reaches it fine. PING danicar.net (24.222.246.120): 56 data bytes 64 bytes from 24.222.246.120: icmp_seq=0 ttl=237 time=104.0 ms 64 bytes from 24.222.246.120: icmp_seq=1 ttl=237 time=74.9 ms 64 bytes from 24.222.246.120: icmp_seq=2 ttl=237 time=90.6

Is there a traceroute equivalent in the VoIP world? I would like to see the route a call takes after it gets to the gateway. Basically showing all the hops until it reaches it's destination or PSTN termination. -Dave

Hi all, That issue is over now. I found why my ESTABLISHED,RELATED rule at the top of INPUT chain did not work for udp and icmp. The reason was I have included the protocol as tcp as below iptables -A INPUT -i eth0 -p tcp -m state --state ESTABLISHED,RELATED -j ACCEPT I removed -p tcp from above rule. Now it works for all protocols. Thanks for your support. ---------- Forwarded message

I have a shorewall 2.0.14 running on a single interface machine (nwww in the log below) that is attempting to be well screwed down. The policy file reads:- #SOURCE DEST POLICY LOG LEVEL LIMIT:BURST fw net DROP info net all DROP info # The FOLLOWING POLICY MUST BE LAST all all

Stephen Clark wrote: > Robert Noland wrote: >> On Thu, 2008-11-13 at 07:48 -0500, Stephen Clark wrote: >>> Julian Elischer wrote: >>>> Stephen Clark wrote: >>>>> Julian Elischer wrote: >>>>>> you will need to define the setup and question better. >>>> thanks.. cleaning it up a bit more... >>>> >>>>

Hi everybody, Right now, we are blocking pings and traceroutes to our website. But, in order for our members to test the connection when they are experiencing slow browsing, we are thinking about unblocking them... Are there still any security issues (flooding, etc...) in enabling them or is that an old problem fixed a long time ago? Thanks, JD

Dear all, If I do cause offence by posting OT here I apologise in advance, I am however desperate for help and after posting on other forums without any ideas I know many networking experts will see this here and hope they can enlighten me. I will gladly donate some PayPal money to the person who can help. I have a leased line on 83.111.160.6 (/30 subnet, gw is 83.111.160.5), and they

Hi all, ive been using the nano howto to load balance to adsl links for a good while now ive got our live server running kernel 2.6.11.6 and these links work fine. i set up another server same model of machine and used the same kernel config ( wanted to try some tos stuff out) 2.6.11.6 but this one doesnt balance properly. what ever i put in table 222 (which is looked at from all sources) it

Hi all I want to reuse command in the shell historys Which command I can only select "traceroute 192.168.0.5" to run? $ history |grep traceroute 26 traceroute 192.168.0.5 27 traceroute -n 192.168.0.5 28 traceroute 192.168.0.10 29 traceroute yahoo.com 46 traceroute 192.168.0.33 eg: history |grep traceroute | awk '{ print$2 " " print$3}' | grep