On Sun, Jul 28, 2002 at 11:03:08PM -0400, lbilyeu wrote:
>> Can you dump
>> ipchains -t nat -vnL
>> and
>> ipchains -vnL
>
>#
>ipchains: not found
>
>Bering1.0 rc3, after a random time period, the internet disappears from 
>eth0.
>I have to reboot Bering and
>power-cycle the cable modem as well.
>

Yes, per my other response the command should be iptables...

iptables -t nat -vnL > zz
iptables --vnL >> zz

add this too...
ip addr >> zz

Then send/copy the zz file over to the list. I'm thinking your DHCP
lease is changing faster than your firewall rules. It would probably work
fine to turn on anti-spoofing and masq everything from the LAN net to
0/0.

# Turn on reverse path filtering
# Since we don't have any asymmetric routing, we can simply turn on
# anti-spoofing for all interfaces.
for f in /proc/sys/net/ipv4/conf/*/rp_filter; do echo 1 > $f; done

iptables -t nat -A POSTROUTING -s $192.168.0.0/24 -o ppp0 -j $M
iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -i eth0  --state NEW -j ACCEPT


>pump -s  gives me addresses outside of RFC1918 (65.34.x.x), so I don't 
>think that is the problem.
>The Renewal/expiration for my DHCP lease is for tomorrow.
>
>What logs/dumps should I be examining for Bering rc3 diagnosis?

I haven't looked at pump logs in a while, but I suspect it's changing 
the IP when you loose functionality.

// George

-- 
GEORGE GEORGALIS, System Admin/Architect    cell: 347-451-8229 
Security Services, Web, Mail,            mailto:[EMAIL PROTECTED] 
File, Print, DB and DNS Servers.       http://www.galis.org/george 



-------------------------------------------------------
This sf.net email is sponsored by: Dice - The leading online job board
for high-tech professionals. Search and apply for tech jobs today!
http://seeker.dice.com/seeker.epl?rel_code=31
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to