similar to: traceroute misbehaviour on dual-home using -i or -s

My Linux workstation (Mandrake 10.1 kernel 2.6.8.1) is dual-homed to two ADSL Internet providers. Card eth0 (192.168.9.250) is the default route and leads to an SMC router (192.168.9.254). Card eth1 (192.168.1.250) leads to a Linksys router (192.168.1.1). I''m not doing any NAT or PPPoE in the workstation - the SMC and Linksys handle it all. If I remove all general default routes from

Hi, I am setting up a firewall on CENTOS 4.4. I have done default block iptables -P INPUT DROP iptables -P FORWARD DROP iptables -P OUTPUT DROP I have enabled ICMP to www.google.com iptables -A OUTPUT -p icmp -d 64.233.189.104 -j ACCEPT iptables -A INPUT -p icmp -s 64.233.189.104 -j ACCEPT Ping works fine as below [root at firebox rc.d]# ping 64.233.189.104 PING 64.233.189.104 (

Seems like the message got filtered on BUGTRAQ, I'd still think at least some of the people on this list may have an interest in parts of the data below. Cheers. ---------- Forwarded message ---------- Date: Sat, 29 Jul 2000 06:11:54 +0300 (EET DST) From: Ville <viha@cryptlink.net> To: bugtraq@securityfocus.com Subject: Linux traceroute (oddness & localhost memory-alloc) Hi.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, I've got this strange thing: I setup a openvpn link between two openwrts. NetA: 192.168.2.0/24 NetB: 192.168.0.0/24 In netA there is a mail server + DNS: 192.168.2.44, with domain name branch.abc.com In netB there is a mail server + DNS: 192.168.0.44, with domain name abc.com I setup both DNS server to be a slave server of each other

Neil, Doesn't look like my original message made it to the mailing list so here you are. ---------- Forwarded Message ---------- Subject: Re: Fwd: [CentOS] HOW to enable traceroute with IPTABLES Date: Sat February 17 2007 10:07 From: Robert Spangler <lazydog at zoominternet.net> To: CentOS mailing list <centos at centos.org> On Sat February 17 2007 03:11, Indunil Jayasooriya

hello there, im running a 3interface inet, dmz, loc. i have some public ip addresses. one public address is the router of the provider, the second one is the linux box running shorewall. all other public interfaces are on the dmz nic with proxy-arp. now whenever i do a traceroute (the dmz boxes are windows, icmp traceroute) the very first hop gets timeout/stars, then the router of the provider

Hello, I''m having a very strange problem concerning traceroute and routing and didn''t know if lartc or netfilter would be the correct choice for asking. (so sorry if my question is misplaced) I have the following setup: public ip -- gw1 -- 172.16.0.1 --- 172.16.0.2/and public ip''s --- gw2 --- switch --users (public and private ip addresses; ip-user-pub) from the

CentOS Errata and Enhancement Advisory 2011:0469 Upstream details at : http://rhn.redhat.com/errata/RHBA-2011-0469.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 8d044975056f6e1f7485a62cd8309f49 traceroute-2.0.1-6.el5.i386.rpm Source: 12a273e76a16f11869981bde05d35831 traceroute-2.0.1-6.el5.src.rpm -- Johnny Hughes

CentOS Errata and Enhancement Advisory 2011:0469 Upstream details at : http://rhn.redhat.com/errata/RHBA-2011-0469.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 55faf2478a5db7379ef455523f2e0cad traceroute-2.0.1-6.el5.x86_64.rpm Source: 12a273e76a16f11869981bde05d35831 traceroute-2.0.1-6.el5.src.rpm -- Johnny

CentOS Errata and Bugfix Advisory 2011:0469 Upstream details at : https://rhn.redhat.com/errata/RHBA-2011-0469.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: f6e26bd969eaa53861500b22804f140a traceroute-2.0.1-6.el5.i386.rpm Source: a44d3ee8852b4931e777680e97602cc4 traceroute-2.0.1-6.el5.src.rpm -- Karanbir Singh

CentOS Errata and Bugfix Advisory 2011:0469 Upstream details at : https://rhn.redhat.com/errata/RHBA-2011-0469.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: 9b2f0df9e44e596cec2585e413847f8d traceroute-2.0.1-6.el5.x86_64.rpm Source: a44d3ee8852b4931e777680e97602cc4 traceroute-2.0.1-6.el5.src.rpm -- Karanbir

Hi you all guys/girls from this list, I almost never use email lists, but this problem is driving me crazy. I use shorewall for a long time ( since version 1.2.x) but now I use it where I work, and here we now have 4 different ISP for redundance and because it''s cheaper then 1 ISP and a bigger link. 3 of 4 ISP I have no problems, but on the 4th ISP here goes my problem : I have a

How do I allow traceroute to reach my server? Pings work fine but traceroute stops at the last hop before my server. If I shut off the firewall it reaches it fine. PING danicar.net (24.222.246.120): 56 data bytes 64 bytes from 24.222.246.120: icmp_seq=0 ttl=237 time=104.0 ms 64 bytes from 24.222.246.120: icmp_seq=1 ttl=237 time=74.9 ms 64 bytes from 24.222.246.120: icmp_seq=2 ttl=237 time=90.6

Is there a traceroute equivalent in the VoIP world? I would like to see the route a call takes after it gets to the gateway. Basically showing all the hops until it reaches it's destination or PSTN termination. -Dave

Hi all, That issue is over now. I found why my ESTABLISHED,RELATED rule at the top of INPUT chain did not work for udp and icmp. The reason was I have included the protocol as tcp as below iptables -A INPUT -i eth0 -p tcp -m state --state ESTABLISHED,RELATED -j ACCEPT I removed -p tcp from above rule. Now it works for all protocols. Thanks for your support. ---------- Forwarded message

I have a shorewall 2.0.14 running on a single interface machine (nwww in the log below) that is attempting to be well screwed down. The policy file reads:- #SOURCE DEST POLICY LOG LEVEL LIMIT:BURST fw net DROP info net all DROP info # The FOLLOWING POLICY MUST BE LAST all all

Hi, all! Does any body use this print station? I try print via smbspool or smbclient and every time I got "access denyed" error. # smbspool smb://ps786fba/Printer1 101 artem Test 1 - test.txt ERROR: ERRSRV - ERRaccess opening remote file Test # PIGGY$ smbclient //ps786fba/Printer1 -P added interface ip=192.168.9.250 bcast=192.168.9.255 nmask=255.255.255.0 Got a positive name query

Stephen Clark wrote: > Robert Noland wrote: >> On Thu, 2008-11-13 at 07:48 -0500, Stephen Clark wrote: >>> Julian Elischer wrote: >>>> Stephen Clark wrote: >>>>> Julian Elischer wrote: >>>>>> you will need to define the setup and question better. >>>> thanks.. cleaning it up a bit more... >>>> >>>>

Hi everybody, Right now, we are blocking pings and traceroutes to our website. But, in order for our members to test the connection when they are experiencing slow browsing, we are thinking about unblocking them... Are there still any security issues (flooding, etc...) in enabling them or is that an old problem fixed a long time ago? Thanks, JD

I want to use --min-size to copy just large files (and their necessary parent directories), but everything I've tried copies *all* the source directories, and creates them empty on the destination even if they don't have any big files in them. I only want the minimal directory hierarchies that contain the big files. This doesn't work: $ rm -rf /tmp/foo $ rsync -ai --min-size