Re: [leaf-user] My Dachstein not quite up and running

[Chris Low]

Okay, these two messages are the requested output files. This first one is the output when I followed only the initial setup and added ssh. The next message will be the output when I set it up to use a static external IP address.

Thanks for the help,

Chris

Leaf Distribution:
dachstein-cd-v1.0.2




uname -a:
Linux Nimrod 2.2.19-3-LEAF-RAID #4 Sat Dec 1 17:27:59 CST 2001 i386 unknown




ip addr show:
1: lo: <LOOPBACK,UP> mtu 3924 qdisc noqueue
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 brd 127.255.255.255 scope global lo
2: ipsec0: <NOARP> mtu 0 qdisc noop qlen 10
link/ipip
3: ipsec1: <NOARP> mtu 0 qdisc noop qlen 10
link/ipip
4: ipsec2: <NOARP> mtu 0 qdisc noop qlen 10
link/ipip
5: ipsec3: <NOARP> mtu 0 qdisc noop qlen 10
link/ipip
6: brg0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop
link/ether fe:fd:0d:00:74:41 brd ff:ff:ff:ff:ff:ff
7: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 100
link/ether 00:90:47:01:98:80 brd ff:ff:ff:ff:ff:ff
inet 192.168.1.184/24 brd 192.168.1.255 scope global eth0
8: eth1: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 100
link/ether 00:90:47:01:a0:7a brd ff:ff:ff:ff:ff:ff
inet 192.168.1.254/24 brd 192.168.1.255 scope global eth1




ip route show:
192.168.1.0/24 dev eth1 proto kernel scope link src 192.168.1.184
192.168.1.0/24 dev eth1 proto kernel scope link src 192.168.1.254
default via 192.168.1.1 dev eth0




lsmod:
Module Pages Used by
ip_masq_vdolive 1180 0 (unused)
ip_masq_user 3708 0 (unused)
ip_masq_raudio 2980 0 (unused)
ip_masq_quake 1220 0 (unused)
ip_masq_portfw 2416 0 (unused)
ip_masq_mfw 3196 0 (unused)
ip_masq_irc 1924 0 (unused)
ip_masq_ftp 3576 0 (unused)
ip_masq_cuseeme 964 0 (unused)
ip_masq_autofw 2476 0 (unused)
rtl8139 10856 2
pci-scan 2300 0 [rtl8139]
isofs 17692 0
ide-cd 22672 0
cdrom 26712 0 [ide-cd]




ipchains -nvL:
Chain input (policy DENY: 2 packets, 1152 bytes):
pkts bytes target prot opt tosa tosx ifname mark outsize source destination ports
0 0 DENY icmp ----l- 0xFF 0x00 * 0.0.0.0/0 0.0.0.0/0 5 -> *
0 0 DENY icmp ----l- 0xFF 0x00 * 0.0.0.0/0 0.0.0.0/0 13 -> *
0 0 DENY icmp ----l- 0xFF 0x00 * 0.0.0.0/0 0.0.0.0/0 14 -> *
4 1320 DENY all ----l- 0xFF 0x00 eth0 0.0.0.0 0.0.0.0/0 n/a
0 0 DENY all ----l- 0xFF 0x00 eth0 255.255.255.255 0.0.0.0/0 n/a
0 0 DENY all ----l- 0xFF 0x00 eth0 127.0.0.0/8 0.0.0.0/0 n/a
0 0 DENY all ----l- 0xFF 0x00 eth0 224.0.0.0/4 0.0.0.0/0 n/a
0 0 DENY all ----l- 0xFF 0x00 eth0 10.0.0.0/8 0.0.0.0/0 n/a
0 0 DENY all ----l- 0xFF 0x00 eth0 172.16.0.0/12 0.0.0.0/0 n/a
256 27503 DENY all ----l- 0xFF 0x00 eth0 192.168.0.0/16 0.0.0.0/0 n/a
0 0 DENY all ----l- 0xFF 0x00 eth0 0.0.0.0/8 0.0.0.0/0 n/a
0 0 DENY all ----l- 0xFF 0x00 eth0 128.0.0.0/16 0.0.0.0/0 n/a
0 0 DENY all ----l- 0xFF 0x00 eth0 191.255.0.0/16 0.0.0.0/0 n/a
0 0 DENY all ----l- 0xFF 0x00 eth0 192.0.0.0/24 0.0.0.0/0 n/a
0 0 DENY all ----l- 0xFF 0x00 eth0 223.255.255.0/24 0.0.0.0/0 n/a
0 0 DENY all ----l- 0xFF 0x00 eth0 240.0.0.0/4 0.0.0.0/0 n/a
0 0 DENY all ----l- 0xFF 0x00 eth0 192.168.1.0/24 0.0.0.0/0 n/a
0 0 DENY all ----l- 0xFF 0x00 eth0 192.168.1.184 0.0.0.0/0 n/a
0 0 REJECT all ----l- 0xFF 0x00 eth0 0.0.0.0/0 127.0.0.0/8 n/a
0 0 REJECT all ----l- 0xFF 0x00 eth0 0.0.0.0/0 192.168.1.0/24 n/a
0 0 REJECT tcp ------ 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 * -> 137
0 0 REJECT tcp ------ 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 * -> 135
0 0 REJECT udp ------ 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 * -> 137
0 0 REJECT udp ------ 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 * -> 135
0 0 REJECT tcp ------ 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 * -> 138:139
0 0 REJECT udp ------ 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 * -> 138
0 0 REJECT udp ------ 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 137:138 -> *
0 0 REJECT udp ------ 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 135 -> *
0 0 REJECT tcp ------ 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 137:139 -> *
0 0 REJECT tcp ------ 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 135 -> *
0 0 REJECT tcp ------ 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 * -> 113
0 0 ACCEPT tcp ------ 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 * -> 1024:65535
0 0 REJECT udp ----l- 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 * -> 161:162
0 0 ACCEPT udp ------ 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 * -> 53
0 0 ACCEPT udp ------ 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 * -> 68
0 0 DENY udp ------ 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 * -> 67
0 0 ACCEPT udp ------ 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 * -> 1024:65535
0 0 ACCEPT icmp ------ 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 * -> *
0 0 ACCEPT ospf ------ 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 n/a
0 0 DENY all ----l- 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 n/a
0 0 REJECT udp ----l- 0xFF 0x00 * 0.0.0.0/0 0.0.0.0/0 * -> 161:162
0 0 REJECT udp ----l- 0xFF 0x00 * 0.0.0.0/0 0.0.0.0/0 161:162 -> *
32 4556 ACCEPT all ------ 0xFF 0x00 * 0.0.0.0/0 0.0.0.0/0 n/a
Chain forward (policy DENY: 0 packets, 0 bytes):
pkts bytes target prot opt tosa tosx ifname mark outsize source destination ports
0 0 DENY icmp ----l- 0xFF 0x00 * 0.0.0.0/0 0.0.0.0/0 5 -> *
0 0 MASQ all ------ 0xFF 0x00 eth0 192.168.1.0/24 0.0.0.0/0 n/a
0 0 DENY all ------ 0xFF 0x00 * 0.0.0.0/0 0.0.0.0/0 n/a
Chain output (policy DENY: 0 packets, 0 bytes):
pkts bytes target prot opt tosa tosx ifname mark outsize source destination ports
0 0 fairq all ------ 0xFF 0x00 * 0.0.0.0/0 0.0.0.0/0 n/a
0 0 DENY all ----l- 0xFF 0x00 eth0 0.0.0.0 0.0.0.0/0 n/a
0 0 DENY all ----l- 0xFF 0x00 eth0 255.255.255.255 0.0.0.0/0 n/a
0 0 DENY all ----l- 0xFF 0x00 eth0 127.0.0.0/8 0.0.0.0/0 n/a
0 0 DENY all ----l- 0xFF 0x00 eth0 224.0.0.0/4 0.0.0.0/0 n/a
0 0 DENY all ----l- 0xFF 0x00 eth0 10.0.0.0/8 0.0.0.0/0 n/a
0 0 DENY all ----l- 0xFF 0x00 eth0 172.16.0.0/12 0.0.0.0/0 n/a
0 0 DENY all ----l- 0xFF 0x00 eth0 192.168.0.0/16 0.0.0.0/0 n/a
0 0 DENY all ----l- 0xFF 0x00 eth0 0.0.0.0/8 0.0.0.0/0 n/a
0 0 DENY all ----l- 0xFF 0x00 eth0 128.0.0.0/16 0.0.0.0/0 n/a
0 0 DENY all ----l- 0xFF 0x00 eth0 191.255.0.0/16 0.0.0.0/0 n/a
0 0 DENY all ----l- 0xFF 0x00 eth0 192.0.0.0/24 0.0.0.0/0 n/a
0 0 DENY all ----l- 0xFF 0x00 eth0 223.255.255.0/24 0.0.0.0/0 n/a
0 0 DENY all ----l- 0xFF 0x00 eth0 240.0.0.0/4 0.0.0.0/0 n/a
0 0 DENY all ------ 0xFF 0x00 eth0 192.168.1.0/24 0.0.0.0/0 n/a
0 0 REJECT tcp ------ 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 * -> 137
0 0 REJECT tcp ------ 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 * -> 135
0 0 REJECT udp ------ 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 * -> 137
0 0 REJECT udp ------ 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 * -> 135
0 0 REJECT tcp ------ 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 * -> 138:139
0 0 REJECT udp ------ 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 * -> 138
0 0 REJECT udp ------ 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 137:138 -> *
0 0 REJECT udp ------ 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 135 -> *
0 0 REJECT tcp ------ 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 137:139 -> *
0 0 REJECT tcp ------ 0xFF 0x00 eth0 0.0.0.0/0 0.0.0.0/0 135 -> *
0 0 ACCEPT all ------ 0xFF 0x00 * 0.0.0.0/0 0.0.0.0/0 n/a
Chain fairq (1 references):
pkts bytes target prot opt tosa tosx ifname mark outsize source destination ports
0 0 RETURN ospf ------ 0xFF 0x00 * 0x1 0.0.0.0/0 0.0.0.0/0 n/a
0 0 RETURN ospf ------ 0xFF 0x00 * 0x1 0.0.0.0/0 0.0.0.0/0 n/a
0 0 RETURN udp ------ 0xFF 0x00 * 0x1 0.0.0.0/0 0.0.0.0/0 * -> 520
0 0 RETURN udp ------ 0xFF 0x00 * 0x1 0.0.0.0/0 0.0.0.0/0 520 -> *
0 0 RETURN tcp ------ 0xFF 0x00 * 0x1 0.0.0.0/0 0.0.0.0/0 * -> 179
0 0 RETURN tcp ------ 0xFF 0x00 * 0x1 0.0.0.0/0 0.0.0.0/0 179 -> *
0 0 RETURN tcp ------ 0xFF 0x00 * 0x1 0.0.0.0/0 0.0.0.0/0 * -> 53
0 0 RETURN tcp ------ 0xFF 0x00 * 0x1 0.0.0.0/0 0.0.0.0/0 53 -> *
0 0 RETURN udp ------ 0xFF 0x00 * 0x1 0.0.0.0/0 0.0.0.0/0 * -> 53
0 0 RETURN udp ------ 0xFF 0x00 * 0x1 0.0.0.0/0 0.0.0.0/0 53 -> *
0 0 RETURN tcp ------ 0xFF 0x00 * 0x2 0.0.0.0/0 0.0.0.0/0 * -> 23
0 0 RETURN tcp ------ 0xFF 0x00 * 0x2 0.0.0.0/0 0.0.0.0/0 23 -> *
0 0 RETURN tcp ------ 0xFF 0x00 * 0x2 0.0.0.0/0 0.0.0.0/0 * -> 22
0 0 RETURN tcp ------ 0xFF 0x00 * 0x2 0.0.0.0/0 0.0.0.0/0 22 -> *




Some info from the logs (there's tons more just like it, some of it repeated)"
Jan 21 16:25:36 Nimrod kernel: rtl8139.c:v1.12 9/14/2000 Donald Becker, [EMAIL PROTECTED]
Jan 21 16:25:36 Nimrod kernel: http://www.scyld.com/network/rtl8139.html
Jan 21 16:25:36 Nimrod kernel: The PCI BIOS has not enabled the device at 0/48! Updating PCI command 0003->0007.
Jan 21 16:25:36 Nimrod kernel: eth0: RealTek RTL8139 Fast Ethernet at 0xfe00, IRQ 9, 00:90:47:01:98:80.
Jan 21 16:25:36 Nimrod kernel: The PCI BIOS has not enabled the device at 0/56! Updating PCI command 0003->0007.
Jan 21 16:25:36 Nimrod kernel: eth1: RealTek RTL8139 Fast Ethernet at 0xfc00, IRQ 10, 00:90:47:01:a0:7a.
Jan 21 16:25:36 Nimrod kernel: Packet log: input DENY eth0 PROTO=17 192.168.1.175:137 192.168.1.255:137 L=78 S=0x00 I=59191 F=0x0000 T=128 (#10)
Jan 21 16:25:40 Nimrod kernel: martian source 0301a8c0 for 0b01a8c0, dev eth1
Jan 21 16:25:40 Nimrod kernel: ll header: ff ff ff ff ff ff 00 08 c7 6c ba 70 08 06
Jan 21 16:25:41 Nimrod kernel: martian source 0301a8c0 for 0b01a8c0, dev eth1
Jan 21 16:25:41 Nimrod kernel: ll header: ff ff ff ff ff ff 00 08 c7 6c ba 70 08 06
Jan 21 16:25:42 Nimrod kernel: martian source 0301a8c0 for 0b01a8c0, dev eth1
Jan 21 16:25:42 Nimrod kernel: ll header: ff ff ff ff ff ff 00 08 c7 6c ba 70 08 06
Jan 21 16:25:43 Nimrod kernel: martian source 0301a8c0 for 0b01a8c0, dev eth1
Jan 21 16:25:43 Nimrod kernel: ll header: ff ff ff ff ff ff 00 08 c7 6c ba 70 08 06
Jan 21 16:25:44 Nimrod kernel: martian source 0301a8c0 for 0101a8c0, dev eth1
Jan 21 16:25:44 Nimrod kernel: ll header: ff ff ff ff ff ff 00 08 c7 6c ba 70 08 06
Jan 21 16:25:44 Nimrod kernel: martian source 0301a8c0 for 0b01a8c0, dev eth1
Jan 21 16:25:44 Nimrod kernel: ll header: ff ff ff ff ff ff 00 08 c7 6c ba 70 08 06
Jan 21 16:25:45 Nimrod kernel: martian source 0301a8c0 for 0b01a8c0, dev eth1
Jan 21 16:25:45 Nimrod kernel: ll header: ff ff ff ff ff ff 00 08 c7 6c ba 70 08 06
Jan 21 16:25:46 Nimrod kernel: Packet log: input DENY eth0 PROTO=17 192.168.1.1:520 192.168.1.255:520 L=72 S=0x00 I=25213 F=0x0000 T=48 (#10)
Jan 21 16:25:46 Nimrod kernel: martian source 0301a8c0 for 0b01a8c0, dev eth1
Jan 21 16:25:46 Nimrod kernel: ll header: ff ff ff ff ff ff 00 08 c7 6c ba 70 08 06
Jan 21 16:25:47 Nimrod kernel: martian source 0301a8c0 for 0b01a8c0, dev eth1
Jan 21 16:25:47 Nimrod kernel: ll header: ff ff ff ff ff ff 00 08 c7 6c ba 70 08 06
Jan 21 16:25:48 Nimrod kernel: martian source 0301a8c0 for 0101a8c0, dev eth1
Jan 21 16:25:48 Nimrod kernel: ll header: ff ff ff ff ff ff 00 08 c7 6c ba 70 08 06
Jan 21 16:25:48 Nimrod kernel: martian source 0301a8c0 for 0b01a8c0, dev eth1
Jan 21 16:25:48 Nimrod kernel: ll header: ff ff ff ff ff ff 00 08 c7 6c ba 70 08 06
Jan 21 16:25:50 Nimrod kernel: NET: 1 messages suppressed.
Jan 21 16:25:50 Nimrod kernel: martian source 0301a8c0 for 0b01a8c0, dev eth1
Jan 21 16:25:50 Nimrod kernel: ll header: ff ff ff ff ff ff 00 08 c7 6c ba 70 08 06
Jan 21 16:26:00 Nimrod kernel: NET: 2 messages suppressed.
Jan 21 16:26:00 Nimrod kernel: martian source 0301a8c0 for fe01a8c0, dev eth1
Jan 21 16:26:00 Nimrod kernel: ll header: ff ff ff ff ff ff 00 08 c7 6c ba 70 08 06
Jan 21 16:26:01 Nimrod kernel: martian source 0301a8c0 for fe01a8c0, dev eth1
Jan 21 16:26:01 Nimrod kernel: ll header: ff ff ff ff ff ff 00 08 c7 6c ba 70 08 06
Jan 21 16:26:06 Nimrod kernel: NET: 2 messages suppressed.
Jan 21 16:26:06 Nimrod kernel: martian source 0301a8c0 for ff01a8c0, dev eth1
Jan 21 16:26:06 Nimrod kernel: ll header: ff ff ff ff ff ff 00 08 c7 6c ba 70 08 00
Jan 21 16:26:19 Nimrod kernel: Packet log: input DENY eth0 PROTO=1 192.168.1.3:8 192.168.1.254:0 L=60 S=0x00 I=1551 F=0x0000 T=32 (#10)
Jan 21 16:26:21 Nimrod kernel: Packet log: input DENY eth0 PROTO=1 192.168.1.3:8 192.168.1.254:0 L=60 S=0x00 I=1807 F=0x0000 T=32 (#10)
Jan 21 16:26:22 Nimrod kernel: Packet log: input DENY eth0 PROTO=1 192.168.1.3:8 192.168.1.254:0 L=60 S=0x00 I=2063 F=0x0000 T=32 (#10)



-------------------------------------------------------
This SF.net email is sponsored by: Scholarships for Techies!
Can't afford IT training? All 2003 ictp students receive scholarships.
Get hands-on training in Microsoft, Cisco, Sun, Linux/UNIX, and more.
www.ictp.com/training/sourceforge.asp
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html