eric clover wrote:

> ----- Original Message -----
>

<snip>

> | First, What is iproute needed for ?  I don't have it so I cannot say what
> it
> | might be doing.
>
> no idea

<snip>

> | ifconfig
> | route -n  (the -n is because I still don't know the name of your machine,
> and I
> | can get it from ifconfig output)
>
> [root@bl /root]# /sbin/ifconfig
> eth0      Link encap:Ethernet  HWaddr 00:40:C7:87:5B:58
>           inet addr:192.168.5.5  Bcast:192.168.5.255  Mask:255.255.255.0
>           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>           RX packets:1401 errors:0 dropped:0 overruns:0 frame:0
>           TX packets:1375 errors:67 dropped:0 overruns:0 carrier:134
>           collisions:67 txqueuelen:100
>           Interrupt:9 Base address:0xe000
>

seems like a lot of collisions for a home network.  See below.


>

<snip>

> [root@bl /root]# /sbin/route -n
> Kernel IP routing table
> Destination     Gateway         Genmask         Flags Metric Ref    Use
> Iface
> 192.168.5.20    192.168.5.5     255.255.255.255 UGH   0      0        0 eth0
> 192.168.5.5     0.0.0.0         255.255.255.255 UH    0      0        0 eth0
> xxx.xxx.xxx.xxx   0.0.0.0         255.255.255.255 UH    0      0        0
> ppp0
>

> 192.168.5.40    192.168.5.5     255.255.255.255 UGH   0      0        0 eth0
> 192.168.5.60    192.168.5.5     255.255.255.255 UGH   0      0        0 eth0
>

I don't understand how this works, and don't trust anything I don't understand.
see comments below


> 192.168.5.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
>

This route should take care of all the hosts on your internal net and should be
added by ifup when eth0 comes up.  I think the problem is in your adding the
routes with your machine as the gateway.  Below I suggest to comment these out
of static-routes and bounce eth0.


> 127.0.0.0       0.0.0.0         255.0.0.0       U     0      0        0 lo
> 0.0.0.0         xxx.xxx.xxx.xxx   0.0.0.0         UG    0      0        0
> ppp0
>

<snip>

> | cat /etc/sysconfig/network
>
> [root@bl /root]# cat /etc/sysconfig/network
> NETWORKING=yes
> HOSTNAME="bl"

Mine stops here since ip is dynamic on firewall at home

>
> GATEWAY="xxx.xxx.xxx.xxx"
> GATEWAYDEV=""
>

Is this the same as your ppp connection?  How do you know what it is going to
be?  I don't believe you need this but frankly don't know if it hurts or not.

> FORWARD_IPV4="yes"

I set forwarding on in rc.local but this seems to be working

>
> IPX="yes"
>

Are you really running/needing netware.  I think this is what the ipx stuff is
for.  If not try deleting the above line and down

> IPXINTERNALNETNUM="0"
> IPXINTERNALNODENUM="0"
> IPXAUTOPRIMARY="on"
> IPXAUTOFRAME="on"
> NISDOMAIN=""
>

>
> | cat /etc/sysconfig/static-routes   (where are the route being set)
>
> [root@bl /root]# cat /etc/sysconfig/static-routes
> eth0 net 192.168.5.20 netmask 255.255.255.255 gw 192.168.5.5
> eth0 net 192.168.5.40 netmask 255.255.255.255 gw 192.168.5.5
> eth0 net 192.168.5.60 netmask 255.255.255.255 gw 192.168.5.5
>

OK, this routing is my main suspect here.  You should not need any of this for
your setup.  I am wondering if the packets are getting routed back to you in a
loop since you told your box to forward all packets back to yourself with the
gateway.  Comment this stuff out and do ifdown eth0; ifup eth0 and then take a
look at your routing table



>
> | cat /etc/sysconfig/network-scripts/ifcfg-eth0
>
> [root@blacktrenchcoat /root]# cat /etc/sysconfig/network-scripts/ifcfg-eth0
> DEVICE="eth0"
> BOOTPROTO="none"
> IPADDR="192.168.5.5"
> NETMASK="255.255.255.0"
> GATEWAY="xxx.xxx.xxx.xxx"

Again I have no gateway entry here.  Is ppp connection Dynamic ip?

>
> HOSTNAME="bl"
> DOMAIN="something.org"

I don't have these either.  Already set in /etc/sysconfig/network, no?

>
> ONBOOT="yes"
> IPXNETNUM_802_2=""
> IPXPRIMARY_802_2="no"
> IPXACTIVE_802_2="no"
> IPXNETNUM_802_3=""
> IPXPRIMARY_802_3="no"
> IPXACTIVE_802_3="no"
> IPXNETNUM_ETHERII=""
> IPXPRIMARY_ETHERII="no"
> IPXACTIVE_ETHERII="no"
> IPXNETNUM_SNAP=""
> IPXPRIMARY_SNAP="no"
> IPXACTIVE_SNAP="no"
>

rest looks like mine

>
> | and one last shot in the dark:  cat /sbin/ifup.local  (if exists)
>
> [root@bl /root]# cat /sbin/ifup.local
> cat: /sbin/ifup.local: No such file or directory
>

Cool, no suprises there


>
> | I guess while we are at it :
> |
> | ls /etc/rc.d/rc3.d   ( or what ever runlevel you are running)
>
> [root@bl /root]# ls /etc/rc.d/rc3.d
> K00single      K15pvmd     K20rwhod      K45arpwatch  K70timezone
> K90network-bak  S05kudzu    S40atd       S90xfs
> K01kdcrotate   K20nfs      K30mcserv     K60lpd       K75netfs
> K92anacron      S10network  S40crond     S99linuxconf
> K05portsentry  K20rstatd   K30sendmail   K60lpd-bak   K83ypbind
> K92ipchains     S11portmap  S50inet      S99local
> K10pulse       K20rusersd  K34yppasswdd  K65identd    K84apmd      K96irda
> S20random   S75keytable
> K15httpd       K20rwalld   K36mserver    K70nfslock   K84ypserv    K96pcmcia
> S30syslog   S85gpm
>

Hmm nothing to get worked up about here from a networking standpoint but
security guys will go nuts.  Do you need portmap for some reason?  My guess is
no.  same with inet unless you are using ftp or (shudder) telnet.  Say it ain't
so!

what services are you running through inetd?  Take a hard look at
/etc/inetd.conf and make sure everything is commented out that you don't want.
If nothing there, then use ntsysv or whatever and remove this service.

I also have never understood why linuxconf nees to be running so I don't run
it.

>
>



>
> i just checked a few other machines, they do NOT have iproute installed.
> im going to remove it and PRAY it works.
>

That is what I would do even though I did not see anything in the rpm that
should cause a problem if not run

>
> | Bret <-- man among men.
> |

Let's wait to see if we can get it working first :)

I would redo/ simplify the routing first and see what that does.  It is this
that I am most suspicious of.  Very strange and as I said earlier I think it is
routing everything back to you. so no packets get out.  I may be
misunderstanding this and if there is a reason for this then I hope someone can
enlighten us.

Let us know how it goes.

Bret



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to