similar to: Xen domU default gateway missing/ARP table full

Hi All, >From the documentation I have read on Shorewall, the preferred approach seems to be, to use Proxy ARP instead of Static NAT for hosting web servers in the DMZ Zone. But I have also read that this could cause problems for VPN configurations. I essentially have multiple public IP''s, which I want to map to private addresses in the DMZ. I also intend to setup a gateway between 2

Hi, I've been trying to get a couple of routers up after h/w failure. The border router is an OpenBSD firewall running NAT between the Internet and a DMZ like subnet, and in that a Linux antivirus server is running NAT to the LAN. When the client does a DNS query it reaches to the f/w where dns is running and is returned into the A/V server but never hits the 0.254 interface. (Shown by

Hi all, Does any one know if this is normal operating of ARP. Or where to start looking. I am seeing a lot of ARP requests for my router IP from the same IP within seconds. 21:04:41.112929 arp who-has IP tell MY ROUTERS IP 21:04:41.186354 arp who-has IP tell MY ROUTERS IP 21:04:41.372972 arp who-has IP tell MY ROUTERS IP 21:04:41.546921 arp who-has IP tell MY ROUTERS IP

Hi all. I experienced a strange behaviour in the "arp" command when I use the "pub" (publishing) flag. This is the scenario (I know it''s an unusual one, but it''s just for a test): __________ | | | host C | | | |__________| | __________|________________________________

Hello I'm trying to setup a bridged guest on an ubuntu 13.10 but it doesn't work. (Everything is ok with NAT) Network sniffing shows that arp replies don't come back to the guest. Test 1 ------ Guest : ping host_bridge_ip (ok) Test 2 ------ Guest: ping other_lan_host (KO) other_lan_host - receives arp who-is request - sends arp reply

Hi all, I''m running Xen-3.2 and linux-image-2.6.18 as Dom0 kernel on a VT-x processor. The problem is that broadcast arp who-has packets are not seen in Dom0 kernel. I''ve tried both precompiled debian kernel and compiled latest one from sources as described at http://lists.xensource.com/archives/html/xen-users/2008-01/msg00699.html There is no linux bridge invoked,

Can''t get proxy arp with arp -s <IPaddr> <MACaddr> pub to work with a 2.4 kernel. I see some evidence in the archive that this was broken in the 2.0.x timeframe and never fixed. Anyone know for sure if it''s broken or working ? (I''m attempting to route a few addresses into a routed network, from the ethernet side of a DSL router that has a /29 public

I''m using iproute2-ss010824 and a 2.4.20 kernel. Quite a subtle issue here, so I can imagine it has not been spotted before. The setup: I have set up a machine as a gateway. The ''external'' interface uses a dummy IP address (eg. 10.0.0.2) and the internal side is a normal address. (it''s more complex in real life using Zebra and such, but this is the basic

Hello, I''m facing a rather strange problem with the netback interface. My setup involves a netvm, which has some physical network interfaces assigned, and a client VM where a net front is running (exposed as eth0) and which is connected to that netvm (via vif42.0 interface, as seen in the netvm on the dumps below). Now, the netvm has two physical network interfaces assigned: 1) A

Folks, We have a setup where each mobile node connects with 1 or more tinc instances (over different links) to a central node. tinc is running in switch mode. The link is chosen by setting the IP address on the active link's interface, and the central node sees this after the first packet on the link, and moves the MAC address to a different 'ethernet port' (link). This works really

Please bear with me as I know I have included a lot of detail. Description Redhat AS 3 Kernel 2.4.21-47.0.1.ELsmp eth0 HWaddr 00:07:E9:11:30:76 inet addr:192.168.1.3 Bcast:192.168.1.255 Mask:255.255.255.0 eth0:1 HWaddr 00:07:E9:11:30:76 inet addr:192.168.3.1 Bcast:192.168.3.255 Mask:255.255.255.0 This interface is up but with no IP address eth1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-03:14.arp Security Advisory The FreeBSD Project Topic: denial of service due to ARP resource starvation Category: core Module: sys Announced:

On 02/26/2014 02:56 PM, Michal Privoznik wrote: > On 25.02.2014 22:45, François Chenais wrote: >> Hello >> >> I'm trying to setup a bridged guest on an ubuntu 13.10 but it doesn't >> work. >> >> (Everything is ok with NAT) >> >> Network sniffing shows that arp replies don't come back to the guest. >> >> >> Test 1

HI, I''ve got a proxy arp setup with iptables and tc. on eth0 i have a route to 172.16.2.0/24 network on eth1 is the LAN of 172.16.1.0/24 network I have enabled proxy arp on both interfaces. Now accordingly, the interface will respond to all ARP requests for which it has a route to. Noy my setup is such, that a user on the LAN, would like to have an ip from the 172.16.2.0/24 network.

Hello alltogether, I''m new to the list, so please excuse any violations of listiquette... I didn''t have to much to do with linux based firewalling and routing for quite a time and found that proxy-arp changed in between... As I struggled with it I found that the Advanced routing... howto wasn''t to helpfull. Especially the documentation seems to be rather vice versa to

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-03:14.arp Security Advisory The FreeBSD Project Topic: denial of service due to ARP resource starvation Category: core Module: sys Announced:

Hi Folks, There is any way to show my arp´s used speeds ? I have a class 24 and i´m using shorewall with arp to bypass then, there is any kind of program or even way to show my arp´s Kbps ?? Like this : Example : IP 200.200.100.100 - Speed used 20 Kbp´s etc etc I just need know how much every arped (i think it´s the right speak), Ip address take out from my total bandwidth. Thanks

what is the limit on the arp cache entires ?! Does someone have very big LANs with linux-routers ? How big ? (i mean flat L2 network, not segmented) I want to know how much can my net can scale ? thanx _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Hi all! I''ve set up a Linux box with shorewall doing proxy arp as per http://www.shorewall.net/shorewall_setup_guide.htm#ProxyARP the 5.2 (non routed) example. Everything is working great except for one thing, and that leads me to my question: is there a conflict between proxy arp and pptp? I''ve set the apropriate ACCEPT rules to allow tcp port 1723 and protocol 47 to the host

Raffaele If you don't want to see much arp traffic on eth1, assuming that you have a subnet 10.190.190.0/24, with 10.190.190.1 on eth1 and the rest of the hosts on eth0, you can use for example, the following filter ebtables -N f1 ebtables -P f1 DROP ebtables -t filter -A FORWARD -i eth0 -o eth1 -p ARP -j f1 ebtables -t filter -A f1 -p ARP --arp-ip-src 10.190.190.0/24 --arp-ip-dst