public inbox for linux-newbie@vger.kernel.org
 help / color / mirror / Atom feed
* RE: 2 NIC cards not talking
@ 2004-01-21 15:23 Chadha, Devesh
  2004-01-21 16:38 ` pa3gcu
  2004-01-21 16:47 ` Juan Facundo Suárez
  0 siblings, 2 replies; 27+ messages in thread
From: Chadha, Devesh @ 2004-01-21 15:23 UTC (permalink / raw)
  To: 'Juan Facundo Suárez', linux-newbie list

Juan,

Eth0 has the external assigned IP by my ISP. Eth1 has a 192.168.x.x ip
address. Eth1 acts as the DHCP server for my LAN. My LAN is working fine. I
can connect machines to the LAN and even connect one machine to another.

But I cannot get eth1 to talk to eth0. I cannot connect the LAN to the
internet nor connect to any internal machine from outside!!

Do I need to bridge the 2 NICs ???

Regards,
Devesh


-----Original Message-----
From: Juan Facundo Suárez [mailto:facundo.suarez@ensi.com.ar] 
Sent: Wednesday, January 21, 2004 10:13 AM
To: linux-newbie list
Subject: Re: 2 NIC cards not talking


Sorry, i don't understand at all. You say that you have two cards, in the
same machine, are them in the same subnet ? why don't you put one, wich
connects to "outside" in one, and the other in another subnet?. I have
working a firewall/router with iptables, and the card is connected to de
adsl-modem has 192.168.1.10, and the card to brins internet to the lan has
192.168.0.1.

 If you cannot ping from a machine in one subnet, to another in other
subnet, maybe you need to load the kernel-module wich does that job.

--
Facundo Suárez
Neuquén - Argentina
FDSoft
mail y jabber: faco@fdsoft.com.ar
facundo.suarez@ensi.com.ar

----- Original Message -----
From: "Chadha, Devesh" <devesh.chadha@lehman.com>
To: <linux-newbie@vger.kernel.org>
Sent: Wednesday, January 21, 2004 11:25 AM
Subject: 2 NIC cards not talking


| Hi,
|
| I have a linux box with 2 NIC cards, both are properly configured. 
| Both
are
| on the same subnet, but still don't ping to one another!!
|
| I need to setup the box as the firewall/router that has eth0 set as
external
| and eth1 as internal serving as DHCP server to other computers on the 
| network. Both have static IPs assigned to them.
|
| Regards,
| Devesh
| 6-6859
|
|
| ----------------------------------------------------------------------
| ----
----
| This message is intended only for the personal and confidential use of 
| the designated recipient(s) named above.  If you are not the intended
recipient of
| this message you are hereby notified that any review, dissemination, 
| distribution or copying of this message is strictly prohibited.  This 
| communication is for information purposes only and should not be 
| regarded
as
| an offer to sell or as a solicitation of an offer to buy any financial 
| product, an official confirmation of any transaction, or as an 
| official statement of Lehman Brothers.  Email transmission cannot be 
| guaranteed to
be
| secure or error-free.  Therefore, we do not represent that this
information is
| complete or accurate and it should not be relied upon as such.  All 
| information is subject to change without notice.
|
| -
| To unsubscribe from this list: send the line "unsubscribe 
| linux-newbie" in the body of a message to majordomo@vger.kernel.org 
| More majordomo info at  http://vger.kernel.org/majordomo-info.html
| Please read the FAQ at http://www.linux-learn.org/faqs

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org More majordomo info at
http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

------------------------------------------------------------------------------
This message is intended only for the personal and confidential use of the designated recipient(s) named above.  If you are not the intended recipient of this message you are hereby notified that any review, dissemination, distribution or copying of this message is strictly prohibited.  This communication is for information purposes only and should not be regarded as an offer to sell or as a solicitation of an offer to buy any financial product, an official confirmation of any transaction, or as an official statement of Lehman Brothers.  Email transmission cannot be guaranteed to be secure or error-free.  Therefore, we do not represent that this information is complete or accurate and it should not be relied upon as such.  All information is subject to change without notice.

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

^ permalink raw reply	[flat|nested] 27+ messages in thread
* RE: 2 NIC cards not talking
@ 2004-01-22 21:39 Chadha, Devesh
  2004-01-23  0:52 ` chuck
  0 siblings, 1 reply; 27+ messages in thread
From: Chadha, Devesh @ 2004-01-22 21:39 UTC (permalink / raw)
  To: 'chuck', Beolach; +Cc: linux-newbie

The name is Devesh.

I have already answered the question in an earlier email. However, once
again for your convenience,

Ping -I eth0 192.168.1.1 gives Destination host unreachable.
Ping -I eth1 xxx.xxx.xxx.xxx also gives Destination host unreachable.

So pinging from eth0 to ip of eth1 and vice versa give dest host
unreachable.

Pinging from eth1 to external gateway also gives dest host unreachable.

Let me know if u need more info

Regards,
Devesh


-----Original Message-----
From: chuck [mailto:chuck@gelm.net] 
Sent: Thursday, January 22, 2004 4:24 PM
To: Beolach
Cc: linux-newbie@vger.kernel.org
Subject: Re: 2 NIC cards not talking


Hi, Beolach:
Thanks.
I asked, but Chadha never reported his (exact) 'ping' usage, nor the (exact)
error message. :-| Chuck

Beolach wrote:
> 
> ping has a -I option that allows you to specify the source interface.  
> I haven't used this option myself, but I would guess Chadha used some 
> thing like this: 'ping -I eth0 192.168.1.1'.
> 
> Conway S. Smith
> 
> chuck wrote:
> > Dear Chadha:
> >
> > In (4.) & (5.)...
> >
> > I know how to ping from a host with an 'eth0' or 'eth1' device. I do 
> > not know how to ping from 'eth0' or from 'eth1'.
> >
> > Sorry, I cannot help.
> >
> > Chuck
> >
> > "Chadha, Devesh" wrote:
> > <snip>
> >
> >
> >>4.Pinging 192.168.1.1 from eth0 gave destnation host unreachable and 
> >>pinging xxx.xxx.xxx.xxx from eth1 gave the same.
> >>
> >>5. I can connect to internet using eth0 since I can browse the 
> >>internet. I can also ping the gateway from eth0
> >
> > <snip>
> >

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org More majordomo info at
http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

------------------------------------------------------------------------------
This message is intended only for the personal and confidential use of the
designated recipient(s) named above.  If you are not the intended recipient of
this message you are hereby notified that any review, dissemination,
distribution or copying of this message is strictly prohibited.  This
communication is for information purposes only and should not be regarded as
an offer to sell or as a solicitation of an offer to buy any financial
product, an official confirmation of any transaction, or as an official
statement of Lehman Brothers.  Email transmission cannot be guaranteed to be
secure or error-free.  Therefore, we do not represent that this information is
complete or accurate and it should not be relied upon as such.  All
information is subject to change without notice.

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

^ permalink raw reply	[flat|nested] 27+ messages in thread
* RE: 2 NIC cards not talking
@ 2004-01-22 13:52 Chadha, Devesh
  0 siblings, 0 replies; 27+ messages in thread
From: Chadha, Devesh @ 2004-01-22 13:52 UTC (permalink / raw)
  To: 'Beolach'; +Cc: chuck, linux-newbie

Beolach,

You are right. Ping -I eth0 192.168.1.1 is what I use to ping from one
interface to another.

Regards,
Devesh


-----Original Message-----
From: linux-newbie-owner@vger.kernel.org
[mailto:linux-newbie-owner@vger.kernel.org] On Behalf Of Beolach
Sent: Wednesday, January 21, 2004 11:32 PM
Cc: chuck; linux-newbie@vger.kernel.org
Subject: Re: 2 NIC cards not talking


Oops.  I just tried it, and it doesn't take an interface name (eth0), 
but rather, the IP address for the interface.  So instead of

ping -I eth0 192.168.1.1

it would be

ping -I xxx.xxx.xxx.xxx 192.168.1.1

Where xxx.xxx.xxx.xxx is the IP address of eth0.

Beolach wrote:
> ping has a -I option that allows you to specify the source interface.  
> I
> haven't used this option myself, but I would guess Chadha used some 
> thing like this: 'ping -I eth0 192.168.1.1'.
> 
> 
> Conway S. Smith
> 
> chuck wrote:
> 
>>Dear Chadha:
>>
>>In (4.) & (5.)...
>>
>>I know how to ping from a host with an 'eth0' or 'eth1' device. I do 
>>not know how to ping from 'eth0' or from 'eth1'.
>>
>>Sorry, I cannot help.
>>
>>Chuck
>>
>>"Chadha, Devesh" wrote:
>><snip>
>>
>>
>>
>>>4.Pinging 192.168.1.1 from eth0 gave destnation host unreachable and 
>>>pinging xxx.xxx.xxx.xxx from eth1 gave the same.
>>>
>>>5. I can connect to internet using eth0 since I can browse the 
>>>internet. I can also ping the gateway from eth0
>>
>><snip>
>>
> 
> -
> To unsubscribe from this list: send the line "unsubscribe 
> linux-newbie" in the body of a message to majordomo@vger.kernel.org 
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at http://www.linux-learn.org/faqs
> 


-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org More majordomo info at
http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs


------------------------------------------------------------------------------
This message is intended only for the personal and confidential use of the
designated recipient(s) named above.  If you are not the intended recipient of
this message you are hereby notified that any review, dissemination,
distribution or copying of this message is strictly prohibited.  This
communication is for information purposes only and should not be regarded as
an offer to sell or as a solicitation of an offer to buy any financial
product, an official confirmation of any transaction, or as an official
statement of Lehman Brothers.  Email transmission cannot be guaranteed to be
secure or error-free.  Therefore, we do not represent that this information is
complete or accurate and it should not be relied upon as such.  All
information is subject to change without notice.

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

^ permalink raw reply	[flat|nested] 27+ messages in thread
[parent not found: <5F84A09ECDD5D411973000508BE32470266024F6@exnyc07.lehman.co m>]
* RE: 2 NIC cards not talking
@ 2004-01-22  2:31 Chadha, Devesh
  2004-01-22  4:02 ` Beolach
  2004-01-22  4:16 ` chuck
  0 siblings, 2 replies; 27+ messages in thread
From: Chadha, Devesh @ 2004-01-22  2:31 UTC (permalink / raw)
  To: 'Ray Olszewski', linux-newbie

Here are all the answers:

Chuck's questions:
My IP address is a public IP.
I think I am not NATing correctly and hence this problem.
ping -c 4 192.168.1.1 gives:
64 bytes from 192.168.1.1 icmp_seq=1 ttl=64 time=0.237 ms
64 bytes from 192.168.1.1 icmp_seq=2 ttl=64 time=0.152 ms
64 bytes from 192.168.1.1 icmp_seq=3 ttl=64 time=0.150 ms
64 bytes from 192.168.1.1 icmp_seq=4 ttl=64 time=0.152 ms

--- 192.168.1.1 ping statistics ---
4 packets transmitted, 4 received, 0% loss, time 3000ms

ping -c 4 xxx.xxx.xxx.xxx gives:
64 bytes from xxx.xxx.xxx.xxx icmp_seq=1 ttl=64 time=0.237 ms
64 bytes from xxx.xxx.xxx.xxx icmp_seq=2 ttl=64 time=0.146 ms
64 bytes from xxx.xxx.xxx.xxx icmp_seq=3 ttl=64 time=0.151 ms
64 bytes from xxx.xxx.xxx.xxx icmp_seq=4 ttl=64 time=0.149 ms

--- xxx.xxx.xxx.xxx ping statistics ---
4 packets transmitted, 4 received, 0% loss, time 2998ms

Rays questions:
1. Correction, both are not on same subnet. Sorry for the wrong info. I
guess I am not NATing right
2. given that information. see below
3. ip forwarding is on. I dont know if I have NATing set up correct. I
looked up the internet and ran some scripts.
Here is my iptables -nvl output:

Chain INPUT (policy ACCEPT 46 packets, 4390 bytes)
 pkts bytes target        prot  opt   in         out        source
destination

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target        prot  opt   in         out        source
destination
    0     0 ACCEPT         all  --    eth1        *         0.0.0.0/0
0.0.0.0/0

Chain OUTPUT (policy ACCEPT 66 packets, 6036 bytes)
 pkts bytes target        prot  opt   in         out        source
destination

4.Pinging 192.168.1.1 from eth0 gave destnation host unreachable and pinging
xxx.xxx.xxx.xxx from eth1 gave the same.

5. I can connect to internet using eth0 since I can browse the internet. I
can also ping the gateway from eth0

Hope this helps. I know that xxx.xxx.... is annoying, but I cant help it.

Thanks for taking interest...

-----Original Message-----
From: linux-newbie-owner@vger.kernel.org
[mailto:linux-newbie-owner@vger.kernel.org]On Behalf Of Ray Olszewski
Sent: Wednesday, January 21, 2004 8:35 PM
To: linux-newbie@vger.kernel.org
Subject: RE: 2 NIC cards not talking


At 07:32 PM 1/21/2004 -0500, Chadha, Devesh wrote:
>Well my reason for not giving is that it is a public IP and does not have
>any firewalls in place. This exposes my server much more to unauthorized
>"visit"
>
>Anyway...lets get down to getting this done.
>
>I am on RH Linux 8
>uname -a is Linux 2.4.18
>netstat -nr gives
>192.168.1.0                     0.0.0.0         255.255.255.0           U
>eth1
>xxx.xxx.xxx.0           0.0.0.0         255.255.255.0           U
eth0
>127.0.0.1                       0.0.0.0         255.0.0.0
>U       lo
>0.0.0.0                 xxx.xxx.xxx.1   0.0.0.0                 UG
eth0
>
>ifconfig gives me that eth0, eth1 and lo are correctly configured.
>
>ip_forward gives a "1"
>
>What do the gurus say???

Not being a guru -- I'm just a guy who knows something about routing and 
firewalling -- I need the answers to ALL of the questions I asked, not just 
the less than 2 of them that the information above answers.

That includes the two questions I ask below about your public IP address.

It includes examples of the tests you did and how they failed; see my prior 
message for the details.

And just to be clear -- can this host *itself* not connect to other hosts 
on the Internet, or is the problem ONLY with LAN hosts attempting to use it 
as a NAT'ing router?

The kernel capability that firewalls -- iptables in the case of 2.4.x 
kernels - is the same capability that NATs. It certainly seems that you 
need to NAT this connection (or if not, your setup with your ISP is 
suficiently unusual that you won't get meaningful help without describing 
it). So if you do "not have any firewalls in place", how *is* the system 
NAT'ing LAN hosts?

In addition to everything I asked for before, we probably need to see the 
output of

         iptables -nvL


>-----Original Message-----
>From: Ray Olszewski [mailto:ray@comarre.com]
>Sent: Wednesday, January 21, 2004 7:02 PM
>To: linux-newbie@vger.kernel.org
>Subject: RE: 2 NIC cards not talking
>
>
>At 04:52 PM 1/21/2004 -0500, Chadha, Devesh wrote:
> >[...]
> >Ray:
> >I have static IP and therefore I cannot give the actual IP address.
>
>I don't understand why, unless for some reason you think that your IP
>address is a secret. Once you start using the address for any purpose, it
>will be known to everyone you deal with, after all.
>
>Even if you are that secretive, we do need to know a couple of things about
>the address. One, is it a public IP address? Two, is it on a different
>network (probably what you call a "subnet") from the internal, LAN
>interface? If we don't know at least that much information reliably, then
>we won't be able to eliminate, or spot, some possible sources of your
>problem.
[garbage deleted]


-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs


------------------------------------------------------------------------------
This message is intended only for the personal and confidential use of the
designated recipient(s) named above.  If you are not the intended recipient of
this message you are hereby notified that any review, dissemination,
distribution or copying of this message is strictly prohibited.  This
communication is for information purposes only and should not be regarded as
an offer to sell or as a solicitation of an offer to buy any financial
product, an official confirmation of any transaction, or as an official
statement of Lehman Brothers.  Email transmission cannot be guaranteed to be
secure or error-free.  Therefore, we do not represent that this information is
complete or accurate and it should not be relied upon as such.  All
information is subject to change without notice.

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

^ permalink raw reply	[flat|nested] 27+ messages in thread
[parent not found: <5F84A09ECDD5D411973000508BE32470266024F5@exnyc07.lehman.co m>]
* RE: 2 NIC cards not talking
@ 2004-01-22  0:32 Chadha, Devesh
  2004-01-22  1:24 ` chuck
  0 siblings, 1 reply; 27+ messages in thread
From: Chadha, Devesh @ 2004-01-22  0:32 UTC (permalink / raw)
  To: 'Ray Olszewski', linux-newbie

Well my reason for not giving is that it is a public IP and does not have
any firewalls in place. This exposes my server much more to unauthorized
"visit"

Anyway...lets get down to getting this done.

I am on RH Linux 8
uname -a is Linux 2.4.18
netstat -nr gives
192.168.1.0			0.0.0.0		255.255.255.0		U
eth1
xxx.xxx.xxx.0		0.0.0.0		255.255.255.0		U	eth0
127.0.0.1			0.0.0.0		255.0.0.0
U	lo
0.0.0.0			xxx.xxx.xxx.1	0.0.0.0			UG	eth0

ifconfig gives me that eth0, eth1 and lo are correctly configured.

ip_forward gives a "1"

What do the gurus say???


-----Original Message-----
From: Ray Olszewski [mailto:ray@comarre.com]
Sent: Wednesday, January 21, 2004 7:02 PM
To: linux-newbie@vger.kernel.org
Subject: RE: 2 NIC cards not talking


At 04:52 PM 1/21/2004 -0500, Chadha, Devesh wrote:
>[...]
>Ray:
>I have static IP and therefore I cannot give the actual IP address.

I don't understand why, unless for some reason you think that your IP 
address is a secret. Once you start using the address for any purpose, it 
will be known to everyone you deal with, after all.

Even if you are that secretive, we do need to know a couple of things about 
the address. One, is it a public IP address? Two, is it on a different 
network (probably what you call a "subnet") from the internal, LAN 
interface? If we don't know at least that much information reliably, then 
we won't be able to eliminate, or spot, some possible sources of your
problem.



-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

------------------------------------------------------------------------------
This message is intended only for the personal and confidential use of the
designated recipient(s) named above.  If you are not the intended recipient of
this message you are hereby notified that any review, dissemination,
distribution or copying of this message is strictly prohibited.  This
communication is for information purposes only and should not be regarded as
an offer to sell or as a solicitation of an offer to buy any financial
product, an official confirmation of any transaction, or as an official
statement of Lehman Brothers.  Email transmission cannot be guaranteed to be
secure or error-free.  Therefore, we do not represent that this information is
complete or accurate and it should not be relied upon as such.  All
information is subject to change without notice.

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

^ permalink raw reply	[flat|nested] 27+ messages in thread
[parent not found: <5F84A09ECDD5D411973000508BE32470266024F2@exnyc07.lehman.co m>]
* RE: 2 NIC cards not talking
@ 2004-01-21 21:52 Chadha, Devesh
  0 siblings, 0 replies; 27+ messages in thread
From: Chadha, Devesh @ 2004-01-21 21:52 UTC (permalink / raw)
  To: 'chuck gelm net'; +Cc: 'linux-newbie@vger.kernel.org'

Chuck,

Noted your and Ray's comments. I will get back with all the information
soon.

Ray:
I have static IP and therefore I cannot give the actual IP address.

All:
I am using the office ID and they append this disclaimer to every email.
Don't have any control on that. Sorry for the inconvenience.

Regards,
Devesh


-----Original Message-----
From: chuck gelm net [mailto:chuck@gelm.net] 
Sent: Wednesday, January 21, 2004 4:45 PM
To: Chadha, Devesh
Cc: 'linux-newbie@vger.kernel.org'
Subject: Re: 2 NIC cards not talking


Hello, Chadha:

 You do not show how you attempt the 'ping',
nor the error message.

Please show exact ping command attempt.
Please show output of 'netstat -r -n'.

 Both cards (should not, cannot) be on the same subnet
for the 'firewall/router' to function.  The 'firewall/router' should show a
route to the local LAN (eth1) for all addresses as 192.168.x.y and a default
route (0.0.0.0) to eth0.

An old 'netstat -n -r' of mine looked like:
Kernel IP routing table
Destination     Gateway         Genmask         Flags   MSS Window  irtt
Iface
67.39.15.254    0.0.0.0         255.255.255.255 UH        0 0          0
ppp0
192.168.0.0     0.0.0.0         255.255.255.0   U         0 0          0
eth0
127.0.0.0       0.0.0.0         255.0.0.0       U         0 0          0
lo
0.0.0.0         67.39.15.254    0.0.0.0         UG        0 0          0
ppp0

 In the above case, ppp0 was a ppp-over-ethernet association with eth1. You
should mask out your real IP address for security (if static).

HTH, Chuck
p.s. I have never understood the signature threat! ? ! ? 
Perhaps a separate email identity for public messages?



 

"Chadha, Devesh" wrote:
> 
> Hi,
> 
> I have a linux box with 2 NIC cards, both are properly configured. 
> Both are on the same subnet, but still don't ping to one another!!
> 
> I need to setup the box as the firewall/router that has eth0 set as 
> external and eth1 as internal serving as DHCP server to other 
> computers on the network. Both have static IPs assigned to them.
> 
> Regards,
> Devesh
> 6-6859
> 
> ----------------------------------------------------------------------
> --------
> This message is intended only for the personal and confidential use of the
> designated recipient(s) named above.  If you are not the intended
recipient of
> this message you are hereby notified that any review, dissemination,
> distribution or copying of this message is strictly prohibited.  This
> communication is for information purposes only and should not be regarded
as
> an offer to sell or as a solicitation of an offer to buy any financial
> product, an official confirmation of any transaction, or as an official
> statement of Lehman Brothers.  Email transmission cannot be guaranteed to
be
> secure or error-free.  Therefore, we do not represent that this
information is
> complete or accurate and it should not be relied upon as such.  All
> information is subject to change without notice.


------------------------------------------------------------------------------
This message is intended only for the personal and confidential use of the
designated recipient(s) named above.  If you are not the intended recipient of
this message you are hereby notified that any review, dissemination,
distribution or copying of this message is strictly prohibited.  This
communication is for information purposes only and should not be regarded as
an offer to sell or as a solicitation of an offer to buy any financial
product, an official confirmation of any transaction, or as an official
statement of Lehman Brothers.  Email transmission cannot be guaranteed to be
secure or error-free.  Therefore, we do not represent that this information is
complete or accurate and it should not be relied upon as such.  All
information is subject to change without notice.

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

^ permalink raw reply	[flat|nested] 27+ messages in thread
[parent not found: <5F84A09ECDD5D411973000508BE32470266024E7@exnyc07.lehman.co m>]
* RE: 2 NIC cards not talking
@ 2004-01-21 16:47 Chadha, Devesh
  0 siblings, 0 replies; 27+ messages in thread
From: Chadha, Devesh @ 2004-01-21 16:47 UTC (permalink / raw)
  To: 'pa3gcu@zeelandnet.nl', linux-newbie list

Thanks Richard,

I would try that!!

A little history..
I have tried the home network howto and the script given there, but it did
not work. I tried to understand iptables and write them myself, that didn't
work! I have now loaded firestarter firewall....but still no result.

I shall try your solution after I reach home and get back to you tomorrow.

Regards,
Devesh


-----Original Message-----
From: pa3gcu [mailto:pa3gcu@zeelandnet.nl] 
Sent: Wednesday, January 21, 2004 11:38 AM
To: Chadha, Devesh; linux-newbie list
Subject: Re: 2 NIC cards not talking


On Wednesday 21 January 2004 16:23, Chadha, Devesh wrote:
> Juan,
>
> Eth0 has the external assigned IP by my ISP. Eth1 has a 192.168.x.x ip 
> address. Eth1 acts as the DHCP server for my LAN. My LAN is working 
> fine. I can connect machines to the LAN and even connect one machine 
> to another.
>
> But I cannot get eth1 to talk to eth0. I cannot connect the LAN to the 
> internet nor connect to any internal machine from outside!!

Then you need "masquerading", in otherwords iptables or ipchains. Also make
sure /proc/sys/net/ipv4/ip_forward is set to "1"

Something like the following for iptables;

#!/bin/sh

iptables --flush            # Flush all the rules in filter and nat tables
iptables --table nat --flush
iptables --delete-chain     #chains that are not in default filter/nat table
iptables --table nat --delete-chain

# Set up IP FORWARDing and Masquerading
iptables --table nat --append POSTROUTING --out-interface eth0 -j MASQUERADE
iptables --append FORWARD --in-interface eth1 -j ACCEPT

echo 1 > /proc/sys/net/ipv4/ip_forward  # Enables packet forwarding by
kernel This is a must for both examples.

Or the following with ipchains.
/sbin/ipchains -A forward -s 192.168.11.0/24 -j MASQ
Change to suit your subnet.

> Do I need to bridge the 2 NICs ???

No.

> Regards,
> Devesh
>

-- 
If the Linux community is a bunch of theives because they
try to imitate windows programs, then the Windows community
is built on organized crime.

Regards Richard
pa3gcu@zeelandnet.nl
http://people.zeelandnet.nl/pa3gcu/




------------------------------------------------------------------------------
This message is intended only for the personal and confidential use of the
designated recipient(s) named above.  If you are not the intended recipient of
this message you are hereby notified that any review, dissemination,
distribution or copying of this message is strictly prohibited.  This
communication is for information purposes only and should not be regarded as
an offer to sell or as a solicitation of an offer to buy any financial
product, an official confirmation of any transaction, or as an official
statement of Lehman Brothers.  Email transmission cannot be guaranteed to be
secure or error-free.  Therefore, we do not represent that this information is
complete or accurate and it should not be relied upon as such.  All
information is subject to change without notice.

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

^ permalink raw reply	[flat|nested] 27+ messages in thread
* Re: 2 NIC cards not talking
@ 2004-01-21 15:13 Juan Facundo Suárez
  0 siblings, 0 replies; 27+ messages in thread
From: Juan Facundo Suárez @ 2004-01-21 15:13 UTC (permalink / raw)
  To: linux-newbie list

Sorry, i don't understand at all. You say that you have two cards, in the
same machine, are them in the same subnet ? why don't you put one, wich
connects to "outside" in one, and the other in another subnet?. I have
working a firewall/router with iptables, and the card is connected to de
adsl-modem has 192.168.1.10, and the card to brins internet to the lan has
192.168.0.1.

 If you cannot ping from a machine in one subnet, to another in other
subnet, maybe you need to load the kernel-module wich does that job.

--
Facundo Suárez
Neuquén - Argentina
FDSoft
mail y jabber: faco@fdsoft.com.ar
facundo.suarez@ensi.com.ar

----- Original Message -----
From: "Chadha, Devesh" <devesh.chadha@lehman.com>
To: <linux-newbie@vger.kernel.org>
Sent: Wednesday, January 21, 2004 11:25 AM
Subject: 2 NIC cards not talking


| Hi,
|
| I have a linux box with 2 NIC cards, both are properly configured. Both
are
| on the same subnet, but still don't ping to one another!!
|
| I need to setup the box as the firewall/router that has eth0 set as
external
| and eth1 as internal serving as DHCP server to other computers on the
| network. Both have static IPs assigned to them.
|
| Regards,
| Devesh
| 6-6859
|
|
| --------------------------------------------------------------------------
----
| This message is intended only for the personal and confidential use of the
| designated recipient(s) named above.  If you are not the intended
recipient of
| this message you are hereby notified that any review, dissemination,
| distribution or copying of this message is strictly prohibited.  This
| communication is for information purposes only and should not be regarded
as
| an offer to sell or as a solicitation of an offer to buy any financial
| product, an official confirmation of any transaction, or as an official
| statement of Lehman Brothers.  Email transmission cannot be guaranteed to
be
| secure or error-free.  Therefore, we do not represent that this
information is
| complete or accurate and it should not be relied upon as such.  All
| information is subject to change without notice.
|
| -
| To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
| the body of a message to majordomo@vger.kernel.org
| More majordomo info at  http://vger.kernel.org/majordomo-info.html
| Please read the FAQ at http://www.linux-learn.org/faqs

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

^ permalink raw reply	[flat|nested] 27+ messages in thread
* 2 NIC cards not talking
@ 2004-01-21 14:25 Chadha, Devesh
  2004-01-21 21:44 ` chuck gelm net
  0 siblings, 1 reply; 27+ messages in thread
From: Chadha, Devesh @ 2004-01-21 14:25 UTC (permalink / raw)
  To: 'linux-newbie@vger.kernel.org'

Hi,

I have a linux box with 2 NIC cards, both are properly configured. Both are
on the same subnet, but still don't ping to one another!!

I need to setup the box as the firewall/router that has eth0 set as external
and eth1 as internal serving as DHCP server to other computers on the
network. Both have static IPs assigned to them.

Regards,
Devesh
6-6859


------------------------------------------------------------------------------
This message is intended only for the personal and confidential use of the
designated recipient(s) named above.  If you are not the intended recipient of
this message you are hereby notified that any review, dissemination,
distribution or copying of this message is strictly prohibited.  This
communication is for information purposes only and should not be regarded as
an offer to sell or as a solicitation of an offer to buy any financial
product, an official confirmation of any transaction, or as an official
statement of Lehman Brothers.  Email transmission cannot be guaranteed to be
secure or error-free.  Therefore, we do not represent that this information is
complete or accurate and it should not be relied upon as such.  All
information is subject to change without notice.

-
To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.linux-learn.org/faqs

^ permalink raw reply	[flat|nested] 27+ messages in thread
end of thread, other threads:[~2004-01-23 16:54 UTC | newest]

Thread overview: 27+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-01-21 15:23 2 NIC cards not talking Chadha, Devesh
2004-01-21 16:38 ` pa3gcu
2004-01-21 16:47 ` Juan Facundo Suárez
  -- strict thread matches above, loose matches on Subject: below --
2004-01-22 21:39 Chadha, Devesh
2004-01-23  0:52 ` chuck
2004-01-23  4:04   ` Beolach
2004-01-23  6:33     ` pa3gcu
2004-01-23 16:54       ` Ray Olszewski
2004-01-23 10:55     ` chuck
2004-01-22 13:52 Chadha, Devesh
     [not found] <5F84A09ECDD5D411973000508BE32470266024F6@exnyc07.lehman.co m>
2004-01-22  5:56 ` Ray Olszewski
2004-01-22  2:31 Chadha, Devesh
2004-01-22  4:02 ` Beolach
2004-01-22  4:16 ` chuck
2004-01-22  4:28   ` Beolach
2004-01-22  4:32     ` Beolach
2004-01-22 21:23     ` chuck
     [not found] <5F84A09ECDD5D411973000508BE32470266024F5@exnyc07.lehman.co m>
2004-01-22  1:35 ` Ray Olszewski
2004-01-22  0:32 Chadha, Devesh
2004-01-22  1:24 ` chuck
     [not found] <5F84A09ECDD5D411973000508BE32470266024F2@exnyc07.lehman.co m>
2004-01-22  0:01 ` Ray Olszewski
2004-01-21 21:52 Chadha, Devesh
     [not found] <5F84A09ECDD5D411973000508BE32470266024E7@exnyc07.lehman.co m>
2004-01-21 17:08 ` Ray Olszewski
2004-01-21 16:47 Chadha, Devesh
2004-01-21 15:13 Juan Facundo Suárez
2004-01-21 14:25 Chadha, Devesh
2004-01-21 21:44 ` chuck gelm net

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox