lkml.org 
[lkml]   [1998]   [May]   [17]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: 2.1.102: ipchains: REJECT does only DENY - network gurus please
>>>>> "Andi" == Andi Kleen <ak@muc.de> writes:

Andi> What it says - there is no output route for iph->saddr. Can you
Andi> ping 192.168.0.2? What is the actual value of saddr/iph->saddr
Andi> on this place?

Yes, I can ping 192.168.0.2 (client taliesin) from 192.168.0.1 (server zahn).
netstat -r gives:
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
192.168.0.0 * 255.255.255.0 U 0 0 0 eth0

May 17 16:15:32 zahn vmunix: icmp_send: ip_route_output(&rt, iph->saddr 200A8C0, saddr 14040C2, RT_TOS(tos), 0)

This means iph->saddr is 192.168.0.2, saddr is 194.64.64.1 .
194.64.64.1 was the destination of the original packet that I want
to reject here.
There is currently no route to the address 194.64.64.1,
only when I am connected to my ISP, that is also the reason why I want to
reject that packet using ipchains.

Steffen

--
home email: user@domain where domain=berlin.snafu.de, user=zahn
Use of my address for unsolicited commercial advertising is forbidden.
2^3021377 - 1 | "Where do you want to crash today?"

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu

\
 
 \ /
  Last update: 2005-03-22 13:42    [W:0.104 / U:0.060 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site