Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Magnus Solvang <magnus@solvang.net>
To: Netfilter Mailing List <netfilter@lists.netfilter.org>
Subject: ping from 'wrong' ip-address
Date: Wed, 26 Feb 2003 15:13:51 +0100	[thread overview]
Message-ID: <20030226141351.GA23528@first.knowledge.no> (raw)

A 1/8 subnet (32-64). Pinging had suddenly changed from using the correct
ip-address for the external interface to use the ip-address for the first
alias for this interface (eth1:0). I can't ping outside anymore.
The ip-address for eth1:0 was previously a machine on the network, that
now has been moved to a reserved ip-address on the LAN.

Could this be a ARP-cache-problem?

eth1      Link encap:Ethernet  HWaddr 00:50:DA:3F:BC:7C
          inet addr:xxx.xx.xx.49  Bcast:xxx.xx.xx.63  Mask:255.255.255.224
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:88183 errors:0 dropped:0 overruns:0 frame:0
          TX packets:107259 errors:0 dropped:0 overruns:0 carrier:0
          collisions:436 txqueuelen:100
          RX bytes:47743572 (45.5 Mb)  TX bytes:67780367 (64.6 Mb)
          Interrupt:10 Base address:0xe800


# ping www.vg.no -c 1 -I eth1
PING www.vg.no (193.69.165.20) from xxx.xx.xx.34 eth1: 56(84) bytes of data.
From 193.69.71.34 icmp_seq=1 Destination Port Unreachable
From 193.69.71.34 icmp_seq=1 Destination Port Unreachable
From 193.69.71.34 icmp_seq=1 Destination Port Unreachable
From 193.69.71.34 icmp_seq=1 Destination Port Unreachable
From 193.69.71.34 icmp_seq=1 Destination Port Unreachable
From 193.69.71.34 icmp_seq=1 Destination Port Unreachable
ping: sendmsg: Operation not permitted

--- www.vg.no ping statistics ---
1 packets transmitted, 0 received, +6 errors, 100% loss, time 96ms

iptables logs many lines like this:

Feb 26 15:07:59 firewall kernel: mangle OUTPUT:IN= OUT=eth1 SRC=xxx.xx.xx.34 DST=193.69.165.20 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=ICMP TYPE=8 CODE=0 ID=21021 SEQ=256
Feb 26 15:07:59 firewall kernel: DROP: IN= OUT=eth1 SRC=xxx.xx.xx.34 DST=193.69.165.20 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=ICMP TYPE=8 CODE=0 ID=21021 SEQ=256

Anyone familiar with this problem?

- M


             reply	other threads:[~2003-02-26 14:13 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2003-02-26 14:13 Magnus Solvang [this message]
2003-02-27 15:09 ` ping from 'wrong' ip-address Magnus Solvang

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20030226141351.GA23528@first.knowledge.no \
    --to=magnus@solvang.net \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox