SUMMARY: Re: routing table oddities

From: Adam Levin (levins_at_westnet.com)
Date: 11/28/05

  • Next message: Paul Hunter: "Hung Domain E15K"
    Date: Sun, 27 Nov 2005 22:25:58 -0500 (EST)
    To: Sun Managers Mailing List <sunmanagers@sunmanagers.org>
    
    

    Original question summarized below.

    Thanks to:
    "dersmythe@fastmail.fm" <dersmythe@fastmail.fm>
    Lou Germain <lgermain@lumarc.com>
    Webpro <aielloster@gmail.com>
    "[ISO-8859-1] Anthony Florendo" <arflorendo@gmail.com>
      "Hudes, Dana" <hudesd@hra.nyc.gov>
    "Donovan, Chris" <Chris.Donovan@team.telstra.com>

    Turns out the problem was the chair->keyboard interface, sort of.

    I was *filtering* the tcpdump output, looking for 10.66.0.3. Naturally,
    this won't work, because 10.66.0.3 is the *gateway*. It is neither a
    source nor destination, and therefore won't show up.

    Someone mentioned using snoop -V port 80, which showed the traffic leaving
    the interface.

    In further diagnosing, I used snoop -v to get lots of detail, and saw
    the destination mac was the mac of the gateway, so it *was* going to the
    right place.

    It turns out that this is a problem further down the network, and probably
    due to several hacks and kludges that we've been forced to put into place
    because the infrastructure is not entirely finished.

    So, while I still can't connect where I need to, we now know there's no
    problem with Sun machine itself.

    Thanks very much for the help!

    -Adam

    On Sat, 26 Nov 2005, Adam Levin wrote:
    > Now we have a problem: it needs to talk to the net. Our network guy set up
    > our firewall (cisco FWSM in a 6509-e chassis) so that 10.66.0.3 is a gateway.
    > I then add a static route:
    > route add -host 66.94.234.13 10.66.0.3 -static
    > That 66 address is yahoo.com, just for testing.
    > When I try to telnet to that address on port 80, I get no errors for several
    > minutes. I get the "Trying ..." message, and then several minutes later, it
    > times out and fails.
    > I've used tcpdump to watch the interfaces (all of them!) and I don't see the
    > packets at all. If I try to telnet to the 10.66.0.3 gateway, I do see the
    > packets, though the connection is refused by the firewall.
    ...
    _______________________________________________
    sunmanagers mailing list
    sunmanagers@sunmanagers.org
    http://www.sunmanagers.org/mailman/listinfo/sunmanagers


  • Next message: Paul Hunter: "Hung Domain E15K"

    Relevant Pages

    • Re: VLAN problems
      ... Where these 2 systems connected to the same switch port and cabling? ... The new gateway have only one gigabit ethernet interface connected to ... input packets with dribble condition detected ...
      (freebsd-net)
    • problems with clients behind ipf/ipnat firewall
      ... While everything from my gateway box is fine. ... 10 packets transmitted, 10 packets received, 0% packet loss ... # rules for the external fxp0 interface ... pass out quick on fxp0 proto tcp from any to any flags S keep state ...
      (FreeBSD-Security)
    • Re: esp tunnel without gif(4) [Was Re: vpn1/fw1 NG toipsec/racoontroubles, help please ...]
      ... Anyway building firewall rules to the IPSec connection configured without gif interface is also possible. ... Packets goes via ipfw 2 times: first encoded, in normal IPv4 form, second time encapsulated in EPS frames. ... I don't know if it works the same whet sysctl's fw_onepass is set to 1 (on my gateway is set to 0) but filtering packets before they passed to the IPSec tunnel is possible and it works without gif's. ... On gateway it's posiible to sniff on "clear" interface and compare it with ESP traffic on "encrypted" interface. ...
      (FreeBSD-Security)
    • Re: Routing With Two ISPs?
      ... >>I have a 4.8 box serving as a gateway with two connections to the ... Is there some way to set the box up so that packets are ... >>on one interface, is there a way to make the outgoing packets from my ... >>web server use that same interface as a gateway instead of the default ...
      (freebsd-net)
    • Re: Routing With Two ISPs?
      ... >I have a 4.8 box serving as a gateway with two connections to the ... Is there some way to set the box up so that packets are ... >on one interface, is there a way to make the outgoing packets from my ... >web server use that same interface as a gateway instead of the default ...
      (freebsd-net)