Sponsored Content
Full Discussion: routing and firewall
Top Forums UNIX for Advanced & Expert Users routing and firewall Post 302319475 by otheus on Monday 25th of May 2009 10:36:49 AM
Old 05-25-2009
The problem is that your rule blocks both the ping request AND ping replies to 192.168.1.5. You might need to use the conntrack module:
Code:
iptables -A FORWARD -s 0/0 -i eth0 -d 192.168.1.5 -o eth1 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -s 0/0 -i eth0 -d 192.168.1.5 -o eth1 -j REJECT

 

9 More Discussions You Might Find Interesting

1. IP Networking

Routing

I have SCO Unix. I have 2 routers. as it is now, when someone telnets to UNIX and goes through router #1 everything is fine. The users who go through router #2 can not connect at all. I talked to CISCO and they said I need to set up a second Gateway on UNIX. They said what is happening is that... (1 Reply)
Discussion started by: john fli
1 Replies

2. IP Networking

Routing

ok i configured my gateway and IP address(es) using ifconfig and route.. but how can i bind unique IPs to users ? (im using FreeBSD 4.2 RELEASE #3) (9 Replies)
Discussion started by: DevilGREEN
9 Replies

3. UNIX for Dummies Questions & Answers

routing

Can anyone help with the following; I am working on a unix server (Apple OS X Server). We have two network cards in the server. Both cards are on different subnets i.e en1 is on 192.168.10.10/24 and the built in ethernet is on 10.10.150.10/24. From a computer plugged into en1 (and set to ip... (5 Replies)
Discussion started by: mrthrt
5 Replies

4. UNIX for Advanced & Expert Users

Firewall - 2 Internet accesses - routing rules from source

Hello, I would like to modify my firewall configuration for being able to handle 2 internet connections in my Red zone. I would then like to configure some selecting routing rules depending on the internal source. Actual configuration: ===================== 1 router A (ISP)... (1 Reply)
Discussion started by: el70
1 Replies

5. UNIX for Advanced & Expert Users

routing

Hi, in which file and how shuold be decalred a gateway and its IP adresse ? Where and how add a gateway ? Many thanks before. (4 Replies)
Discussion started by: big123456
4 Replies

6. Linux

Routing

Hello Friends I have two network cards eth0 192.168.100.1 eth1 10.0.0.1 There NIC connect with diff. LAN I want to make my Linux machine as a Router, Please tell me using IPTABLES command ROUTE command :) (2 Replies)
Discussion started by: jaibw
2 Replies

7. IP Networking

IP Routing

I am using RedHat Linux 9, In this box their are two lan intefaces. eth0 ====> LAN 192.168.100.100 255.255.255.0 eth1 ====> Internet Static IP 255.255.255.0 59.144.168.226 (Gateway) I want to define a gateway 59.144.168.226 for my LAN... (2 Replies)
Discussion started by: jaibw
2 Replies

8. UNIX for Dummies Questions & Answers

Routing tables

Hey guys, I needed to add a route to my routing table and I got it to work but on reboot it gets removed. Anyone know what file I can add this route to so it stays on the machine after a reboot? (9 Replies)
Discussion started by: kingdbag
9 Replies

9. UNIX for Dummies Questions & Answers

HELP me please. UNIX Routing

Hello everybody, I need help: I have to make routing between two different LAN. I have the IP for first network 81.180.75.70 and the mask is 255.255.255.192 and for the second network: 192.168.1.1 and the mask 255.255.255.0 So, each network has only one PC with windows (this is for test),... (0 Replies)
Discussion started by: meorfi
0 Replies
IFNDP-PROXY(5)						       Network configuration						    IFNDP-PROXY(5)

NAME
ifndp-proxy[-<interface name>] - IPv6 NDP and IPv4 ARP proxy entries SYNOPSIS
/etc/sysconfig/network/ifndp-proxy /etc/sysconfig/network/ifndp-proxy-<interface name> DESCRIPTION
These files contain IPv6 NDP and IPv4 ARP proxy settings, that should be applied using the ip neigh add proxy command documented in the ip(8) manual page that provides a common interface for IPv4 and IPv6. The NDP/ARP proxy is required, e.g. when IP addresses from the same subnet have to be used on the interface of the host as well as on interfaces behind a (tunnel) interface and using a bridge is not an option. Don't forget to enable forwarding and the NDP/ARP proxy by setting net.ipv6.conf.<all|default|interface name>.proxy_ndp = 1 net.ipv6.conf.<all|default|interface name>.forwarding = 1 and/or net.ipv4.conf.<all|default|interface name>.proxy_arp = 1 net.ipv4.conf.<all|default|interface name>.forwarding = 1 or net.ipv4.ip_forward = 1 either as global all setting in the /etc/sysctl.conf file or using the ifsysctl(5) files, that allow per-interface setup. Forwarding can be also enabled in the /etc/sysconfig/sysctl file using the IP_FORWARD and IPV6_FORWARD variables. The proxy entries are added and deleted using the if-{up|down}.d/ndp-proxy script, every time after an involved interface has been set up or down. SYNTAX
The format of the ifndp-proxy file is: <address> <address interface> <proxy interface list> The format of the ifndp-proxy-<address interface> file is same to above, but allows also to omit the address interface by using a "-" as placeholder inside of the file, because it is already available in the file name: <address> <address interface | -> <proxy interface list> Lines beginning with # and blank lines are ignored. Each line defines to add a proxy NDP/ARP entry with the address of or behind address interface to all interfaces in the proxy interface list. EXAMPLES
Let's assume, your machine is connected via eth0 to a switch with the networks 2001:db8:abba::/64 and 192.168.100.1/24 and is using the IP address 1 itself. You'd like to use the addresses 11 and 12 e.g. for virtual machines behind the tap1 and tap2 interface, that is: 2001:db8:abba::1/64 -- local eth0 address 2001:db8:abba::11/64 -- address behind tap1 2001:db8:abba::12/64 -- address behind tap2 192.168.100.1/24 -- local eth0 address 192.168.100.11/24 -- address behind tap1 192.168.100.12/24 -- address behind tap2 then set up the following entries in the ifndp-proxy file: 2001:db8:abba::1 eth0 tap1 tap2 2001:db8:abba::11 tap1 eth0 tap2 2001:db8:abba::12 tap2 eth0 tap1 192.168.100.1 eth0 tap1 tap2 192.168.100.11 tap1 eth0 tap2 192.168.100.12 tap2 eth0 tap1 additionally to the routing entries in the routes or ifroute-<interface name> files. BUGS
Please report bugs at <https://bugzilla.novell.com/> AUTHOR
Marius Tomaschewski <mt@suse.de> SEE ALSO
ifup(8) ifcfg(5) ifsysctl(8) sysconfig December 2009 IFNDP-PROXY(5)
All times are GMT -4. The time now is 10:31 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy