From: Ramin Dousti <ramin@cannon.eng.us.uu.net>
To: "David C. Hart" <DCH@TQMcube.com>
Cc: iptables mailing list <netfilter@lists.netfilter.org>
Subject: Re: Kernel, IPTables or Router Anomaly? Maybe me?
Date: Fri, 31 Oct 2003 14:18:42 -0500 [thread overview]
Message-ID: <20031031191842.GA30613@cannon.eng.us.uu.net> (raw)
In-Reply-To: <1067611776.1427.47.camel@main.tqmcube.com>
You have three interfaces on the same 192.168.0.0/24. Why?
On Fri, Oct 31, 2003 at 09:49:37AM -0500, David C. Hart wrote:
> I can't figure this out.
>
> Our server has three internal IP addresses on two interfaces. So we have
> eth0, eth0:1 and eth1.
>
> "Oct 31 09:24:47 mail2 kernel: FIREWALLED: IN=eth1 OUT=
> MAC=00:09:5b:22:29:d1:00:06:25:e4:ed:a3:08:00 SRC=217.97.25.71 DST=192.
> 168.0.5 LEN=404 TOS=0x00 PREC=0x00 TTL=111 ID=40607 PROTO=UDP SPT=6022
> DPT=1434 LEN=384"
>
> In this case, destination 192.168.0.5 is on eth0:1. Yet it shows as eth1
> with the eth1 MAC. This connections was NATed through the router so it
> never hit the eth1 interface. Here's part of the ifconfig.
>
> eth0 Link encap:Ethernet HWaddr 00:50:04:65:E3:1B
> inet addr:192.168.0.31 Bcast:192.168.0.255
> Mask:255.255.255.0
>
> eth0:1 Link encap:Ethernet HWaddr 00:50:04:65:E3:1B
> inet addr:192.168.0.5 Bcast:192.168.0.255 Mask:255.255.255.0
>
> eth1 Link encap:Ethernet HWaddr 00:09:5B:22:29:D1
> inet addr:192.168.0.32 Bcast:192.168.0.255
> Mask:255.255.255.0
>
next prev parent reply other threads:[~2003-10-31 19:18 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-10-31 14:49 Kernel, IPTables or Router Anomaly? Maybe me? David C. Hart
2003-10-31 19:18 ` Ramin Dousti [this message]
2003-10-31 20:09 ` David C. Hart
2003-10-31 20:49 ` Ramin Dousti
2003-10-31 21:03 ` David C. Hart
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20031031191842.GA30613@cannon.eng.us.uu.net \
--to=ramin@cannon.eng.us.uu.net \
--cc=DCH@TQMcube.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox