[LARTC] routing problem AAAAAHH!!

[LARTC] routing problem AAAAAHH!!

[Luis Miguel Cruz Miranda]

My main table is:
# ip ro ls
194.149.216.0/24 dev vlan2  scope link
10.1.0.0/24 dev eth0  scope link
127.0.0.0/8 dev lo  scope link
default via 10.1.0.254 dev eth0

I have also these routes and rules:
# ip ru ls
0:      from all lookup local
32757:  from all to 10.2.0.1 lookup 101
32758:  from all to 194.149.216.3 lookup 21
32759:  from all to 194.149.216.2 lookup 21
32760:  from all to 194.149.216.1 lookup 21
32761:  from all to 10.10.10.0/24 lookup main prohibit
32762:  from 10.2.0.1 lookup 100
32763:  from 194.149.216.3 lookup 20
32764:  from 194.149.216.2 lookup 20
32765:  from 194.149.216.1 lookup 20
32766:  from all lookup main
32767:  from all lookup 253

#ip ro ls table 20 && ip ro ls table 21
default via 10.1.0.254 dev eth0
194.149.216.2 dev vlan2  scope link
194.149.216.3 dev vlan2  scope link
194.149.216.1 dev vlan2  scope link

Why 194.149.216.5 is reachable from internet?

Luis Miguel Cruz Miranda.
CCNA - Systems Administrator

---------------------------------------------------------------
B2B INTEGRAL, S.A.
Pol. Ind. de Asipo
C/A - Parcela 86-C
33.428 - CAYES - LLANERA
ASTURIAS (ESPAÑA/SPAIN)
---------------------------------------------------------------
Tel: +34 985 980 804 ---- Fax: +34 985 980 794
---------------------------------------------------------------
WEB: http://www.b2bi.es/

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] routing problem AAAAAHH!!

[Julian Anastasov]

	Hello,

On Tue, 10 Dec 2002, Luis Miguel Cruz Miranda wrote:

> My main table is:
> # ip ro ls
> 194.149.216.0/24 dev vlan2  scope link
> 10.1.0.0/24 dev eth0  scope link
> 127.0.0.0/8 dev lo  scope link
> default via 10.1.0.254 dev eth0
>
> I have also these routes and rules:
> # ip ru ls
> 0:      from all lookup local
> 32757:  from all to 10.2.0.1 lookup 101
> 32758:  from all to 194.149.216.3 lookup 21
> 32759:  from all to 194.149.216.2 lookup 21
> 32760:  from all to 194.149.216.1 lookup 21
> 32761:  from all to 10.10.10.0/24 lookup main prohibit
> 32762:  from 10.2.0.1 lookup 100
> 32763:  from 194.149.216.3 lookup 20
> 32764:  from 194.149.216.2 lookup 20
> 32765:  from 194.149.216.1 lookup 20
> 32766:  from all lookup main
> 32767:  from all lookup 253
>
> #ip ro ls table 20 && ip ro ls table 21
> default via 10.1.0.254 dev eth0
> 194.149.216.2 dev vlan2  scope link
> 194.149.216.3 dev vlan2  scope link
> 194.149.216.1 dev vlan2  scope link
>
> Why 194.149.216.5 is reachable from internet?

Yes, it is reachable:
from 1.2.3.4 to 194.149.216.6 hits rule 32766, table main:
194.149.216.0/24 dev vlan2  scope link

> Luis Miguel Cruz Miranda.
> CCNA - Systems Administrator

Regards

--
Julian Anastasov <ja@ssi.bg>

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/