connection problem

connection problem

[Paulo Andre]

I have a problem where a router reboots every evening. I do not have
control of this router. 
The problem is with iptables, as soons as the router reboots I lose the
connection even when the router has come up afterwards.
I then have to take the interface down, reload the firewall script, then
reconfigure the interface and reapply the firewall script again so that
I can see the router again. 

Can anyone tell me why this happens, the interface is a aliased
interface, if that makes a difference.

Thanks

Paulo

RE: connection problem

[Nigel Clarke]

Paulo,

>I have a problem where a router reboots every evening. I do not have
>control of this router.

For this, you might want to see if the janitors unplug the router to use the
outlet in the evening.
Seriously.

As far as the issue with IPTABLES....this might be an issue with the ARP
cache on the firewall. What kind of
network card are you using? What kernel version?

I've had problem like this on some 2.2 kernel implementations with old
network cards. I'd have to "ifconfig eth* down/up"
for the interface to work.

;-)

--
Nigel Clarke                 Forever Networks
Network Security Engineer    www.forever-networks.com

-----Original Message-----
From: netfilter-admin@lists.netfilter.org
[mailto:netfilter-admin@lists.netfilter.org]On Behalf Of Paulo Andre
Sent: Wednesday, December 04, 2002 10:56 PM
To: netfilter
Subject: connection problem


I have a problem where a router reboots every evening. I do not have
control of this router.
The problem is with iptables, as soons as the router reboots I lose the
connection even when the router has come up afterwards.
I then have to take the interface down, reload the firewall script, then
reconfigure the interface and reapply the firewall script again so that
I can see the router again.

Can anyone tell me why this happens, the interface is a aliased
interface, if that makes a difference.

Thanks

Paulo

RE: connection problem

[Paulo Andre]

On Thu, 2002-12-05 at 16:56, Nigel Clarke wrote:
> Paulo,
> 
> >I have a problem where a router reboots every evening. I do not have
> >control of this router.
> 
> For this, you might want to see if the janitors unplug the router to use the
> outlet in the evening.
> Seriously.
> 
> As far as the issue with IPTABLES....this might be an issue with the ARP
> cache on the firewall. What kind of
> network card are you using? What kernel version?
> 
> I've had problem like this on some 2.2 kernel implementations with old
> network cards. I'd have to "ifconfig eth* down/up"
> for the interface to work.

I will look at that , the old network card, but the funny thing is that
I have to change the IP address on the card to another and then back to
the original for it to work.

> 
> ;-)
> 
> --
> Nigel Clarke                 Forever Networks
> Network Security Engineer    www.forever-networks.com
> 
> -----Original Message-----
> From: netfilter-admin@lists.netfilter.org
> [mailto:netfilter-admin@lists.netfilter.org]On Behalf Of Paulo Andre
> Sent: Wednesday, December 04, 2002 10:56 PM
> To: netfilter
> Subject: connection problem
> 
> 
> I have a problem where a router reboots every evening. I do not have
> control of this router.
> The problem is with iptables, as soons as the router reboots I lose the
> connection even when the router has come up afterwards.
> I then have to take the interface down, reload the firewall script, then
> reconfigure the interface and reapply the firewall script again so that
> I can see the router again.
> 
> Can anyone tell me why this happens, the interface is a aliased
> interface, if that makes a difference.
> 
> Thanks
> 
> Paulo
> 
> 
> 
> 

Re: connection problem

[Joel Newkirk]

On Thursday 05 December 2002 08:35 am, Paulo Andre wrote:
> On Thu, 2002-12-05 at 16:56, Nigel Clarke wrote:
> > Paulo,
> >
> > >I have a problem where a router reboots every evening. I do not
> > > have control of this router.

> > As far as the issue with IPTABLES....this might be an issue with the
> > ARP cache on the firewall. What kind of
> > network card are you using? What kernel version?

> I will look at that , the old network card, but the funny thing is
> that I have to change the IP address on the card to another and then
> back to the original for it to work.

Next time try "arp -d <hostname>" to flush the arp cache, and see if that 
does it, instead of cycling the IP.

j