similar to: Proxy-ARP

Hi, I''m having problems with new Shorewall installation on Fedora Core 3 (had same problem with Core 2 and upgrade did not help even iptables was upgraded from 1.2.9 to 1.2.11). I''ve followed two nic example, but starting Shorewall drops all connections and don''t permit any outgoing requests, even with "all allowed" policy. Policy file is below. Current setup

Hi, this is propably bridge related and not really a xen problem, but it might help someone: Some of our domUs are not able to arp. Arp -n show (incomplete), and doing a tcpdump shows, that on the dom0''s eth0 the arp request goes out, the response comes in, but on the vifX.0 interface the arp response is gone. dom0# tcpdump -ni eth0 arp who-has 10.32.2.51 tell 10.32.7.70 arp reply

Shorewall 4.5.1.1 I have 5 interfaces on a centos box, the first two are internal on two different subnets, the next two are two different ISP''s and the last one is a private network for testing and administration. The second internal subnet (eth1) is rejecting all the arp requests to it and I get the following in the log files ever second or two - May 16 05:28:54 services kernel:

Hello everybody. I could not find an answer to my problem in the archive. (But that may just be me :-) ) I have a problem with proxy arp and connection from loc (localnet) and from the firewall. Works fine from internet to dmz / proxy arp and vise versa. I have a feeling the solution is simple, but I''m no guru in Linux routing etc. The problem seems to be the routing setup. loc -

On Fri, May 8, 2009 at 10:14 AM, Javier Barroso <javibarroso@gmail.com> wrote: > Hello, > > I have a etch xen server with a virtual machine with 2 network > interfaces configured. Every interface has a different mac, and inside > the host has a different ip. > > However I can see with tcpdump and arpwatch (I discover this because > arpwatch told me), about the two ips

Hi, I would like to run a network firewall as a VM on a KVM host. There are ~ 25 VLANs delivered to the KVM host on three dedicated links, no LACP or other things. I have the VLANs 100-180 on the host's enp1s0, the VLANs 200-280 on the host's enp2s0 and the VLANs 300-380 on the host's enp3s0. To save myself from configuring all VLANs on the KVM host, I'd like to hand the entire

Hi, I posted this question yesterday on the Openvpn mailing list, with no response, figured I will ask here too. I have been using openvpn for quite a while, no major problems encountered. Now I need to allow the server to access the lan of the client, and I can not figure out the routing. This is what I have after the tunnel is brought up: SERVER (A.A.A.A) Arx:~# ip addr ... 3: eth1:

Okay, so I''m trying to setup my multiple ISP setup that I described earlier. I have: # ip addr 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: em1: <BROADCAST,MULTICAST,UP,LOWER_UP>

Hello Tom, I have successfully configured proxy arp subnettinng on my network with three hosts in a Dmz. And it works great. (using proxyarp in interfaces) I also tryed this on network below same trouble. However for this network below I have tryed to configure one host in a Dmz (using /etc/shorewall/proxyarp) which works and comes up after I set it up and clear Isp''s arp

I am sharing out ZFS ISCSI luns to my Mac. When copying large files, the network will hang in the middle of the transfer and the LUN will become unavailable until I plumb the NIC. This issue appears to only occur only when I am reading files (ie..syncing an ipod) and not writing (I''m not 100% sure though). When I snoop the interface I notice a bunch of ARP lookups. Any ideas? Thanks in

Hi all, How do I put a rule in to allow all ports on a single IP.. I''m not masq my network as the firewall is on the router. I have another firewall internally that I will be removing sometime soon, but just wish to forward all ports to this firewall (until I can decommission it). 3: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000 link/ether

Hi, I am creating some routing policy and I am having a basic problem with ip. I am starting with 2 hosts to test the configuration. ---------- ---------- | host A |------------| Host B | ---------- ---------- IP: 10.0.100.1 IP: 10.0.100.2 On hostA: # ip address add 10.0.100.1/24 dev eth0 brd + On hostB: # ip address add 10.0.100.2/24 dev eth0 brd +

Hi, I have a linux server running kernel 2.6.19 that is connected with 2 seperate 100Mbit links to the same isp: +---+ +---------------+ | I | +---------------+ | | | S | | | | eth0 --+--------------+ P | | |

I''m using iproute2-ss010824 and a 2.4.20 kernel. Quite a subtle issue here, so I can imagine it has not been spotted before. The setup: I have set up a machine as a gateway. The ''external'' interface uses a dummy IP address (eg. 10.0.0.2) and the internal side is a normal address. (it''s more complex in real life using Zebra and such, but this is the basic

Hello everyone, Please excuse these basic questions but I am new to Linux and I am getting desperate for answers. We are running redhat linux and after many hours of investigation I am unable to get a certain ip rule and ip route command combination to work. These are the software versions installed. [root@c1b04a01 linux-2.4.21-15.EL]# uname -a Linux c1b04a01 2.4.21-15.ELsmp #1 SMP Thu Apr

Hello, I am running Shorewall 2.0.2f, on SuSE 9.2 distro, kernel 2.6.8-24.11-default My ip addr show output is as follows: 1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 brd 127.255.255.255 scope host lo inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0:

I''m attempting to put together a Xen box, which has multiple VLANs running into it, on one bridged interface. I mostly copied the way it was done here: http://renial.net/weblog/2007/02/27/xen-vlan/ I basically have: bond0 is the bond device (composed of eth0 and eth1), vlan757 is the vlan device for vlan 757 on bond0, and "xen757" is a bridge created by the above scripts,

Hello, We have 3 DSL connections connected to eth3 and another interface with a dedicated link in eth0 (main table) We want to balance selected traffic (using fwmark and iptables) through our 3 DSL connections in a secondary table named DSL (without using the dedicated link in eth0), but the next command is not accepted, and gives us the following error: # ip route add default

I must have something configured wrong somewhere. I''ve enabled proxy-arp on my shorewall 2.0.7 firewall. Works fine for what its supposed to do, I can see all the machines through it great. However, whenever its enabled, the network on the DMZ goes screwy. I''ve narrowed it down to this: when proxy arp is enabled for that interface, like such: echo 1 >

I'm trying to figure out how to reload iax2 (without breaking existing calls) so it can listen on a new IP address (like "ip addr add local ..."). This alias IP is added/removed by a custom process (script) for clustering purposes. The iax.conf file contains "bindaddr=0.0.0.0". I tried a "iax2 reload" (executed without errors or warnings) but I'm still not