In my experience, "operation not permitted" errors on LEAF routers typically (not always) signal problems with the firewall ruleset. In this context, I'd suspect that to mean not a problem with Shorewall's default settings (they are quite well tested by now) but one in some change you made. To that end ...

1. I repeat the question Tom asked (quoted below) but you did not answer: is your internal (eth1) network 192.168.1.0/24? If not, what is it?

2. What happens if you try "ping 192.168.1.255" from a router command line?

3. I infer that this is a PPPoE connection, using eth0 as the Ethernet "carrier" for ppp0. Are your interface assignments and routing table consistent with this setup (or am I mistaken in my inference)?

4. If all else fails ... what is the complete output of "iptables -nvL"? The Shorewall config files tell us what you are trying to do; the underlying rulesets tell us what the router actually does. (If it gets to this point, please also include an interface list and routing table.)

Finally, I am assuming here that this router works for other purposes, like connecting LAN hosts to the Internet over the ppp connection. If there are other problems too, please mention them.

At 02:56 AM 12/3/02 +0900, youngdo wrote:
> > [2002/12/02 16:58:02, 0]
> > nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(291)
> > become_domain_master_browser_bcast:
> > Attempting to become domain master browser on workgroup WORK on subnet
> > 192.168.1.254 [2002/12/02 16:58:02, 0]
> > nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(305)
> > become_domain_master_browser_bcast: querying subnet 192.168.1.254 for
> > domain master browser on workgroup WORK [2002/12/02 16:58:04, 0]
> > libsmb/nmblib.c:send_udp(756)
> > Packet send failed to 192.168.1.255(137) ERRNO=Operation not permitted
> > ACCEPT fw loc udp 137:139
>
> The above rule allows UDP port 137 packets from your firewall to the local
> network. Is your local network 192.168.1.0/24? Are you seeing any Shorewall
> log messages about 192.168.1.255:137 ("shorewall show log")?
>

There are not that kind of contents.

Shorewall-1.3.10 Log at firewall -
...
Dec 3 02:18:52 net2all:DROP:IN=ppp0 OUT= SRC=xxx.95.103.78 DST=xxx.xxx.xxx.xxx LEN=48 TOS=0x00 PREC=0x00 TTL=106 ID=16397 DF PROTO=TCP SPT=2958 DPT=4662 WINDOW=16384 RES=0x00 SYN URGP=0
Dec 3 02:18:59 net2all:DROP:IN=ppp0 OUT= SRC=xxx.95.103.78 DST=xxx.xxx.xxx.xxx LEN=48 TOS=0x00 PREC=0x00 TTL=106 ID=16838 DF PROTO=TCP SPT=2958 DPT=4662 WINDOW=16384 RES=0x00 SYN URGP=0
Dec 3 02:19:15 net2all:DROP:IN=ppp0 OUT= SRC=xxx.83.82.104 DST=xxx.xxx.xxx.xxx LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=60372 DF PROTO=TCP SPT=1450 DPT=4662 WINDOW=32767 RES=0x00 SYN URGP=0
Dec 3 02:19:18 net2all:DROP:IN=ppp0 OUT= SRC=xxx.83.82.104 DST=xxx.xxx.xxx.xxx LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=21973 DF PROTO=TCP SPT=1450 DPT=4662 WINDOW=32767 RES=0x00 SYN URGP=0
Dec 3 02:19:24 net2all:DROP:IN=ppp0 OUT= SRC=xxx.83.82.104 DST=xxx.xxx.xxx.xxx LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=63189 DF PROTO=TCP SPT=1450 DPT=4662 WINDOW=32767 RES=0x00 SYN URGP=0
Dec 3 02:19:33 net2all:DROP:IN=ppp0 OUT= SRC=xxx.95.103.78 DST=xxx.xxx.xxx.xxx LEN=48 TOS=0x00 PREC=0x00 TTL=106 ID=19193 DF PROTO=TCP SPT=3125 DPT=4662 WINDOW=16384 RES=0x00 SYN URGP=0
Dec 3 02:19:36 net2all:DROP:IN=ppp0 OUT= SRC=xxx.83.82.104 DST=xxx.xxx.xxx.xxx LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=28119 DF PROTO=TCP SPT=1450 DPT=4662 WINDOW=32767 RES=0x00 SYN URGP=0
Dec 3 02:19:36 net2all:DROP:IN=ppp0 OUT= SRC=xxx.95.103.78 DST=xxx.xxx.xxx.xxx LEN=48 TOS=0x00 PREC=0x00 TTL=106 ID=19402 DF PROTO=TCP SPT=3125 DPT=4662 ...



--
-------------------------------------------"Never tell me the odds!"--------
Ray Olszewski -- Han Solo
Palo Alto, California, USA [EMAIL PROTECTED]
-------------------------------------------------------------------------------



-------------------------------------------------------
This SF.net email is sponsored by: Get the new Palm Tungsten T handheld. Power & Color in a compact size! http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0002en
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to