[olug] debian/ipfwadm problem; was: can't ping winbox

[Mike McNally]

I think tetherow is right and I have an ipfwadm problem.  I compiled a
new kernel and everything seemed to go ok there.  

ping localhost			success

ping p120 or ping 198.168.1.1	failure
	ping: sendto: network is unreachable

What ipfwadm command would open up the firewall wide open, so I can
determine wether this is the source of my problem?

mike


tetherow at nol.org wrote:
> 
> On 29 Jul, Mike McNally wrote:
> > I've been messing with the route command since I think the problem is in
> > the routeing tables, and if they weren't messed up before they
> > definately are now
> >
> > route -n
> >
> > destn         gateway         msk                     iface
> > 127.0.0.1     0.0.0.0         255.255.255.255         lo
> > 192.168.1.0   0.0.0.0         255.255.255.0           eth0
> > 0.0.0.0               0.0.0.0         0.0.0.0                 ppp0
> >
> > I deleted the existing route stuff and followed the net-3 advice to get
> > the above lines setup.  The instructions on "route add gw..." seemed to
> > not exactly fit...  I don't know wether to make eth0 or ppp0 the gw.
> > Linux firewall samba server and window box ea with ethernet cards and
> > connecting to the internet through the linuxbox.
> >
> > hosts
> > 127.0.0.1     localhost
> > 192.168.1.1   p120.mjm.net    p120, linuxbox
> > 192.168.1.2   c366.mjm.net    c366, win98box
> 
> >From a routeless box.
> route add 127.0.0.0 dev lo
> route add 192.168.1.0 dev eth0
> route add <other side of ppp0> dev ppp0
> # This is usually set up when your pppd connection is established
> route add default gw <other side of ppp0>
> # This usually is set up when your pppd connection is established
> 
> This assumes you don't have your local network segmented.
> 
> Now to test, ping another machine on your LAN, ping the gateway, ping
> www.yahoo.com.  If all three of these work from the dialin box then
> your network is up and running as expected.  If you still can't get
> things to work from another host on the LAN to the outside world then
> you probably have a problem with your IP Masquerading.
> 
> ------------------------------------------------------------------------
> Sam Tetherow                           tetherow at nol.org
> Director of Development
> Nebrask@ Online                        http://www.nol.org/
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: olug-unsubscribe at bstc.net
> For additional commands, e-mail: olug-help at bstc.net

---------------------------------------------------------------------
To unsubscribe, e-mail: olug-unsubscribe at bstc.net
For additional commands, e-mail: olug-help at bstc.net