From mboxrd@z Thu Jan 1 00:00:00 1970 From: "caricand.jean-michel" Subject: Iptables seens doesn't understand network address not in class A, B or C Date: Tue, 9 Jul 2002 07:03:57 +0200 Sender: netfilter-admin@lists.samba.org Message-ID: <001e01c22706$08aae620$0103a8c0@pc21> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_001B_01C22716.CBAD6F20" Return-path: Errors-To: netfilter-admin@lists.samba.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: netfilter@lists.samba.org C'est un message de format MIME en plusieurs parties. ------=_NextPart_000_001B_01C22716.CBAD6F20 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable I have a local network with 10.0.2.0 address and 255.255.254.0 netmask.=20 My firewall have IP 10.0.2.130 on eth0.=20 My station have IP 10.0.2.2. I configure my firewall for drop the ping from the station with 1 rules = : # iptables -A INPUT -i eth0 -s 10.0.2.2 -p icmp -j DROP=20 When I ping the firewall from my station (ping 10.0.2.130) , I receive = an response from the serveur=20 Why ? What is the problem ? My netmask ? If i modify my netmask to 255.0.0.0 on firewall and my station, the ping = doesn't work. Normal ! Iptables don't understand network address not in class A, B or C=20 HELP ME !!! ------=_NextPart_000_001B_01C22716.CBAD6F20 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
I have a local network with 10.0.2.0 address and = 255.255.254.0 netmask.
 
My firewall have IP 10.0.2.130 on eth0. =
My station have IP = 10.0.2.2.

I configure my firewall for drop the ping from the station with = 1 rules=20 :

# iptables -A INPUT -i eth0 -s 10.0.2.2 -p icmp -j DROP =

When I=20 ping the firewall from my station (ping 10.0.2.130) , I receive an = response=20 from the serveur
Why ?
 
What is the problem ? My netmask ?
 
If i modify my netmask to 255.0.0.0 on firewall and = my=20 station, the ping doesn't work. Normal !
 
Iptables don't understand network address not in = class A, B or=20 C 
 
HELP ME !!!

------=_NextPart_000_001B_01C22716.CBAD6F20-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: Antony Stone Subject: Re: Iptables seens doesn't understand network address not in class A, B or C Date: Tue, 9 Jul 2002 08:17:40 +0100 Sender: netfilter-admin@lists.samba.org Message-ID: <20020709071741.ZVHJ4119.mta06-svc.ntlworld.com@there> References: <001e01c22706$08aae620$0103a8c0@pc21> Mime-Version: 1.0 Content-Transfer-Encoding: 8bit Return-path: In-Reply-To: <001e01c22706$08aae620$0103a8c0@pc21> Errors-To: netfilter-admin@lists.samba.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: netfilter@lists.samba.org On Tuesday 09 July 2002 6:03 am, caricand.jean-michel wrote: > I have a local network with 10.0.2.0 address and 255.255.254.0 netmask. > > My firewall have IP 10.0.2.130 on eth0. > My station have IP 10.0.2.2. > > I configure my firewall for drop the ping from the station with 1 rules : > > # iptables -A INPUT -i eth0 -s 10.0.2.2 -p icmp -j DROP > > When I ping the firewall from my station (ping 10.0.2.130) , I receive an > response from the serveur > > Why ? > > What is the problem ? My netmask ? No; netfilter can handle any netmask you like - even very strange ones. What is the routing table on: a) your firewall b) machine 10.0.2.2 Antony