IPTables Problem: I think I figured it out... [was IPTables Established connection Problem]
From: Doubletwist (dontspam.doubletwist@spack.nu)Date: 12/19/01
- Next message: Tim Haynes: "Re: seperate computers for http and mx"
- Previous message: gr8matt: "seperate computers for http and mx"
- Next in thread: Tim Haynes: "Re: IPTables Problem: I think I figured it out... [was IPTables Established connection Problem]"
- Reply: Tim Haynes: "Re: IPTables Problem: I think I figured it out... [was IPTables Established connection Problem]"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: Doubletwist <dontspam.doubletwist@spack.nu> Date: 18 Dec 2001 23:26:54 GMT
Ok, I tried Ian Jone's suggestion of checking for buggy HW etc. Swapped
NICs which didn't help.
I then turned on Logging on just about every line. And I found that it
was dropping a lot of packets from a Class A network.
Turns out that though my workstation has a public IP, it is routed
through three hops that have a private IP. [not sure why]
So my server was dropping those connections.
the line in question is
iptables -A INPUT -i eth0 -s 10.0.0.0/8 -j DROP
but shouldn't that look just at the SOURCE address? Which should be
209.2.154.67...
Why would it kill my connections?
Thanks,
Doubletwist
---- traceroute from 209.2.154.37 to 205.1.1.180from 209.2.154.37 1 <10 ms <10 ms <10 ms 10.98.52.1 2 <10 ms <10 ms 14 ms 209.220.153.177 3 <10 ms <10 ms <10 ms 10.98.30.1 4 <10 ms <10 ms 14 ms 10.98.31.3 5 <10 ms <10 ms 14 ms 206.83.90.97 6 13 ms <10 ms 14 ms 198.68.76.55 7 <10 ms 13 ms <10 ms 64.0.0.129 8 14 ms <10 ms 13 ms 64.220.0.65 9 <10 ms 14 ms <10 ms 64.0.0.138 10 <10 ms 14 ms <10 ms 205.1.0.38 11 14 ms <10 ms <10 ms 205.1.0.54 12 14 ms 14 ms <10 ms 205.1.1.180
- Next message: Tim Haynes: "Re: seperate computers for http and mx"
- Previous message: gr8matt: "seperate computers for http and mx"
- Next in thread: Tim Haynes: "Re: IPTables Problem: I think I figured it out... [was IPTables Established connection Problem]"
- Reply: Tim Haynes: "Re: IPTables Problem: I think I figured it out... [was IPTables Established connection Problem]"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|