screend.conf - help an idiot

From: Terry (td3201@yahoo.com)
Date: 04/18/03

  • Next message: McCracken, Denise: "Error on DS25 sysgen with NHD5 and 5.1a" 
    Date: Fri, 18 Apr 2003 06:31:25 -0700 (PDT)
From: Terry <td3201@yahoo.com>
To: tru64-unix-managers@ornl.gov

    Here is my screend.conf again:
    default reject;
    for 10.20.1.0 netmask is 255.255.255.0;
    for 192.168.2.0 netmask is 255.255.255.0;
    between subnet 192.168.2.0 and subnet 10.20.1.0
    accept;

    Here is my ifconfig -a output:
    lo0:
    flags=100c89<UP,LOOPBACK,NOARP,MULTICAST,SIMPLEX,NOCHECKSUM>
         inet 127.0.0.1 netmask ff000000 ipmtu 4096

    sl0: flags=10<POINTOPOINT>

    tu0:
    flags=c63<UP,BROADCAST,NOTRAILERS,RUNNING,MULTICAST,SIMPLEX>
         inet 192.168.2.70 netmask ffffff00 broadcast
    192.168.2.255 ipmtu 1500

    tu1:
    flags=c63<UP,BROADCAST,NOTRAILERS,RUNNING,MULTICAST,SIMPLEX>
         inet 10.20.1.1 netmask ffffff00 broadcast
    10.20.1.255 ipmtu 1500

    tun0: flags=80<NOARP>

    And here is the debug from screend:
    [192.168.2.164]->[10.20.1.2] icmp (8)
    checking cache:
            age 39 [192.168.2.164]->[10.20.1.2] icmp (8)
    match
    (1050672454.640048) af 2 count 120 dlen 84 xid 0x1244
    action 0 REJECT
    [192.168.2.164]->[10.20.1.2] icmp (8)
    checking cache:
            age 40 [192.168.2.164]->[10.20.1.2] icmp (8)
    match
    (1050672455.640048) af 2 count 120 dlen 84 xid 0x1245
    action 0 REJECT
    [192.168.2.164]->[10.20.1.2] icmp (8)
    checking cache:
            age 41 [192.168.2.164]->[10.20.1.2] icmp (8)
    match
    (1050672456.640048) af 2 count 120 dlen 84 xid 0x1246
    action 0 REJECT

    Thank you!

    =====
    Terry

    __________________________________________________
    Do you Yahoo!?
    Yahoo! Tax Center - File online, calculators, forms, and more
    http://tax.yahoo.com

  • Next message: McCracken, Denise: "Error on DS25 sysgen with NHD5 and 5.1a"

    Relevant Pages

    • update(2): boot-image from network-boot server does not apply netmask on V440, doesnt contact gatewa
      ... Rebooting with command: boot ... for ARP/RARP packet Timeout waiting for ARP/RARP packet 4000 ... but then sets an incorrect netmask and thus fails to proceed ... the local subnet to find the Ethernet address of him. ...
      (SunManagers)
    • Re: 2 Nics and default route
      ... >> kernel figures out which interface to use to get to it. ... >> If for some reason you want the cards addressed in the same subnet, ... >> be done by artificially restricting the netmask, ... All machines in the subnet should have the same netmask set and you ...
      (comp.unix.bsd.openbsd.misc)
    • update(3): boot-image from network-boot server does not apply netmask on V440, doesnt contact gatewa
      ... the netmask from the boot-server is not taken: ... RPC-BOOTP FROM BOOT-SERVER ON LOCAL SUBNET, ... Subject: update: boot-image from network-boot server does not apply ...
      (SunManagers)
    • Re: Subnetting/Routing
      ... >>NITPICKING over netmask number's adds nothing to solve the original ... Which was the Whole point of my original post. ... > the subnet problems. ... Years of schooling to learn a few simple rules.. ...
      (comp.os.linux.networking)
    • Re: NAT router confusion
      ... My understanding is that the netmask is only ... to determine how much of the IP address is used for the subnet address. ... last 8 bits of your IP is usable for a specific host on the ... network and the first 24 bits are used for the network address and subnet ...
      (freebsd-questions)