| 1 |
> - is forwarding actually really enabled? Just "cat" the |
| 2 |
> relevant /proc/sys/net/ipv4/ip_forward. |
| 3 |
|
| 4 |
cat /proc/sys/net/ipv4/ip_forward |
| 5 |
returns 1 |
| 6 |
|
| 7 |
> So remaining things to check would be |
| 8 |
> - where do packets do what? Use "tcpdump" on the router to monitor |
| 9 |
> how packets flow. Don't cite all the output, but look at where |
| 10 |
> packets are coming and going. Two terminals with "tcpdump -i eth0" |
| 11 |
> and "tcpdump -i ppp0" would tell you that. Send a few pings from the |
| 12 |
> desktop to the internet. Also try pinging an IP from the desktop, not |
| 13 |
> just hostnames (to rule out nameserver borkage). |
| 14 |
|
| 15 |
Here is what tcdump returns! |
| 16 |
|
| 17 |
ping to www.google.de from desktop |
| 18 |
|
| 19 |
ping -c5 209.85.135.147 |
| 20 |
PING 209.85.135.147 (209.85.135.147) 56(84) bytes of data. |
| 21 |
|
| 22 |
--- 209.85.135.147 ping statistics --- |
| 23 |
5 packets transmitted, 0 received, 100% packet loss, time 4000ms |
| 24 |
|
| 25 |
|
| 26 |
tcpdump -i ppp0 |
| 27 |
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode |
| 28 |
listening on ppp0, link-type LINUX_SLL (Linux cooked), capture size 96 bytes |
| 29 |
00:23:34.170023 IP dslb-088-065-173-238.pools.arcor-ip.net.32864 > |
| 30 |
dns1.arcor-ip.de.domain: 62186+ PTR? 147.135.85.209.in-addr.arpa. |
| 31 |
(45) |
| 32 |
00:23:34.170885 IP dslb-088-065-173-238.pools.arcor-ip.net.32865 > |
| 33 |
dns1.arcor-ip.de.domain: 49362+ PTR? 11.2.253.145.in-addr.arpa. (43) |
| 34 |
00:23:34.186127 IP dns1.arcor-ip.de.domain > |
| 35 |
dslb-088-065-173-238.pools.arcor-ip.net.32864: 62186 NXDomain 0/1/0 |
| 36 |
(105) |
| 37 |
00:23:34.192706 IP dns1.arcor-ip.de.domain > |
| 38 |
dslb-088-065-173-238.pools.arcor-ip.net.32865: 49362 1/0/0 (73) |
| 39 |
00:23:34.193083 IP dslb-088-065-173-238.pools.arcor-ip.net.32865 > |
| 40 |
dns1.arcor-ip.de.domain: 55934+ PTR? 238.173.65.88.in-addr.arpa. (44) |
| 41 |
00:23:34.250939 IP dns1.arcor-ip.de.domain > |
| 42 |
dslb-088-065-173-238.pools.arcor-ip.net.32865: 55934 1/0/0 (97) |
| 43 |
00:23:44.770408 IP cpc1-pnth1-0-0-cust807.cdif.cable.ntl.com.18730 > |
| 44 |
dslb-088-065-173-238.pools.arcor-ip.net.13040: UDP, length 98 |
| 45 |
00:23:44.770494 IP dslb-088-065-173-238.pools.arcor-ip.net > |
| 46 |
cpc1-pnth1-0-0-cust807.cdif.cable.ntl.com: ICMP |
| 47 |
dslb-088-065-173-238.pools.arcor-ip.net udp port 13040 unreachable, |
| 48 |
length 134 |
| 49 |
00:23:44.770752 IP dslb-088-065-173-238.pools.arcor-ip.net.32865 > |
| 50 |
dns1.arcor-ip.de.domain: 21398+ PTR? 40.23.6.82.in-addr.arpa. (41) |
| 51 |
00:23:44.820873 IP dns1.arcor-ip.de.domain > |
| 52 |
dslb-088-065-173-238.pools.arcor-ip.net.32865: 21398 1/0/0 (96) |
| 53 |
00:23:46.085482 IP 222.69.242.140.19774 > |
| 54 |
dslb-088-065-173-238.pools.arcor-ip.net.13040: UDP, length 98 |
| 55 |
00:23:46.085566 IP dslb-088-065-173-238.pools.arcor-ip.net > |
| 56 |
222.69.242.140: ICMP dslb-088-065-173-238.pools.arcor-ip.net udp port |
| 57 |
13040 unreachable, length 134 |
| 58 |
00:23:46.085811 IP dslb-088-065-173-238.pools.arcor-ip.net.32865 > |
| 59 |
dns1.arcor-ip.de.domain: 28846+ PTR? 140.242.69.222.in-addr.arpa. |
| 60 |
(45) |
| 61 |
00:23:46.509496 IP dns1.arcor-ip.de.domain > |
| 62 |
dslb-088-065-173-238.pools.arcor-ip.net.32865: 28846 NXDomain 0/1/0 |
| 63 |
(105) |
| 64 |
00:23:52.092567 IP 222.69.242.140.19774 > |
| 65 |
dslb-088-065-173-238.pools.arcor-ip.net.13040: UDP, length 98 |
| 66 |
00:23:52.092624 IP dslb-088-065-173-238.pools.arcor-ip.net > |
| 67 |
222.69.242.140: ICMP dslb-088-065-173-238.pools.arcor-ip.net udp port |
| 68 |
13040 unreachable, length 134 |
| 69 |
00:23:54.447053 IP dslb-084-057-191-176.pools.arcor-ip.net.3158 > |
| 70 |
dslb-088-065-173-238.pools.arcor-ip.net.epmap: S |
| 71 |
2228649193:2228649193(0) win 53760 <mss 1412,nop,wscale |
| 72 |
3,nop,nop,timestamp 0 0,nop,nop,sackOK> |
| 73 |
00:23:54.447386 IP dslb-088-065-173-238.pools.arcor-ip.net.32865 > |
| 74 |
dns1.arcor-ip.de.domain: 55370+ PTR? 176.191.57.84.in-addr.arpa. (44) |
| 75 |
00:23:54.463773 IP dns1.arcor-ip.de.domain > |
| 76 |
dslb-088-065-173-238.pools.arcor-ip.net.32865: 55370 1/0/0 (97) |
| 77 |
|
| 78 |
tcpdump -i eth0 |
| 79 |
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode |
| 80 |
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes |
| 81 |
00:23:32.895513 IP gentoo-vdr.linux.net.54934 > gentoo.linux.net.ssh: |
| 82 |
P 2356170685:2356170733(48) ack 1373265494 win 1034 <nop,nop,timestamp |
| 83 |
1888728 4586914> |
| 84 |
00:23:32.895566 IP gentoo.linux.net.ssh > gentoo-vdr.linux.net.54934: |
| 85 |
P 1:49(48) ack 48 win 81 <nop,nop,timestamp 4721101 1888728> |
| 86 |
00:23:32.895604 IP gentoo-vdr.linux.net.54934 > gentoo.linux.net.ssh: |
| 87 |
. ack 49 win 1034 <nop,nop,timestamp 1888728 4721101> |
| 88 |
00:23:33.913406 IP gentoo-vdr.linux.net.36415 > gentoo.linux.net.ssh: |
| 89 |
P 220729975:220730023(48) ack 3542615936 win 5880 <nop,nop,timestamp |
| 90 |
1888829 4706313> |
| 91 |
00:23:33.913491 IP gentoo.linux.net.ssh > gentoo-vdr.linux.net.36415: |
| 92 |
P 1:65(64) ack 48 win 116 <nop,nop,timestamp 4721355 1888829> |
| 93 |
00:23:33.913528 IP gentoo-vdr.linux.net.36415 > gentoo.linux.net.ssh: |
| 94 |
. ack 65 win 5880 <nop,nop,timestamp 1888829 4721355> |
| 95 |
00:23:34.168115 IP gentoo-vdr.linux.net.36415 > gentoo.linux.net.ssh: |
| 96 |
P 48:96(48) ack 65 win 5880 <nop,nop,timestamp 1888855 4721355> |
| 97 |
00:23:34.168191 IP gentoo.linux.net.ssh > gentoo-vdr.linux.net.36415: |
| 98 |
P 65:113(48) ack 96 win 116 <nop,nop,timestamp 4721419 1888855> |
| 99 |
00:23:34.168229 IP gentoo-vdr.linux.net.36415 > gentoo.linux.net.ssh: |
| 100 |
. ack 113 win 5880 <nop,nop,timestamp 1888855 4721419> |
| 101 |
00:23:34.168756 IP gentoo.linux.net.ssh > gentoo-vdr.linux.net.36415: |
| 102 |
P 113:209(96) ack 96 win 116 <nop,nop,timestamp 4721419 1888855> |
| 103 |
00:23:34.168814 IP gentoo-vdr.linux.net.36415 > gentoo.linux.net.ssh: |
| 104 |
. ack 209 win 5880 <nop,nop,timestamp 1888855 4721419> |
| 105 |
00:23:34.168771 IP gentoo.linux.net > 209.85.135.147: ICMP echo |
| 106 |
request, id 64284, seq 1, length 64 |
| 107 |
00:23:35.169420 IP gentoo.linux.net > 209.85.135.147: ICMP echo |
| 108 |
request, id 64284, seq 2, length 64 |
| 109 |
00:23:36.169461 IP gentoo.linux.net > 209.85.135.147: ICMP echo |
| 110 |
request, id 64284, seq 3, length 64 |
| 111 |
00:23:37.169504 IP gentoo.linux.net > 209.85.135.147: ICMP echo |
| 112 |
request, id 64284, seq 4, length 64 |
| 113 |
00:23:38.169550 IP gentoo.linux.net > 209.85.135.147: ICMP echo |
| 114 |
request, id 64284, seq 5, length 64 |
| 115 |
00:23:48.174063 IP gentoo.linux.net.ssh > gentoo-vdr.linux.net.36415: |
| 116 |
P 209:353(144) ack 96 win 116 <nop,nop,timestamp 4724920 1888855> |
| 117 |
00:23:48.174138 IP gentoo-vdr.linux.net.36415 > gentoo.linux.net.ssh: |
| 118 |
. ack 353 win 5871 <nop,nop,timestamp 1890255 4724920> |
| 119 |
00:23:48.174117 IP gentoo.linux.net.ssh > gentoo-vdr.linux.net.36415: |
| 120 |
P 353:417(64) ack 96 win 116 <nop,nop,timestamp 4724920 1888855> |
| 121 |
00:23:48.174157 IP gentoo-vdr.linux.net.36415 > gentoo.linux.net.ssh: |
| 122 |
. ack 417 win 5867 <nop,nop,timestamp 1890255 4724920> |
| 123 |
00:23:48.174170 IP gentoo.linux.net.ssh > gentoo-vdr.linux.net.36415: |
| 124 |
P 417:497(80) ack 96 win 116 <nop,nop,timestamp 4724920 1890255> |
| 125 |
00:23:48.174182 IP gentoo-vdr.linux.net.36415 > gentoo.linux.net.ssh: |
| 126 |
. ack 497 win 5862 <nop,nop,timestamp 1890255 4724920> |
| 127 |
|
| 128 |
ping to www.google.de from router |
| 129 |
|
| 130 |
ping -c5 209.85.135.147 |
| 131 |
PING 209.85.135.147 (209.85.135.147) 56(84) bytes of data. |
| 132 |
64 bytes from 209.85.135.147: icmp_seq=1 ttl=246 time=23.2 ms |
| 133 |
64 bytes from 209.85.135.147: icmp_seq=2 ttl=246 time=24.4 ms |
| 134 |
64 bytes from 209.85.135.147: icmp_seq=3 ttl=246 time=23.6 ms |
| 135 |
64 bytes from 209.85.135.147: icmp_seq=4 ttl=246 time=24.6 ms |
| 136 |
64 bytes from 209.85.135.147: icmp_seq=5 ttl=246 time=23.7 ms |
| 137 |
|
| 138 |
--- 209.85.135.147 ping statistics --- |
| 139 |
5 packets transmitted, 5 received, 0% packet loss, time 4025ms |
| 140 |
rtt min/avg/max/mdev = 23.292/23.945/24.603/0.520 ms |
| 141 |
|
| 142 |
tcpdump -i eth0 |
| 143 |
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode |
| 144 |
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes |
| 145 |
|
| 146 |
0 packets captured |
| 147 |
0 packets received by filter |
| 148 |
0 packets dropped by kernel |
| 149 |
|
| 150 |
tcpdump -i ppp0 |
| 151 |
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode |
| 152 |
listening on ppp0, link-type LINUX_SLL (Linux cooked), capture size 96 bytes |
| 153 |
00:26:45.035173 IP dslb-088-065-173-238.pools.arcor-ip.net > |
| 154 |
209.85.135.147: ICMP echo request, id 4181, seq 1, length 64 |
| 155 |
00:26:45.036069 IP dslb-088-065-173-238.pools.arcor-ip.net.32865 > |
| 156 |
dns1.arcor-ip.de.domain: 53808+ PTR? 147.135.85.209.in-addr.arpa. |
| 157 |
(45) |
| 158 |
00:26:45.056503 IP dns1.arcor-ip.de.domain > |
| 159 |
dslb-088-065-173-238.pools.arcor-ip.net.32865: 53808 NXDomain 0/1/0 |
| 160 |
(105) |
| 161 |
00:26:45.056824 IP dslb-088-065-173-238.pools.arcor-ip.net.32865 > |
| 162 |
dns1.arcor-ip.de.domain: 37596+ PTR? 238.173.65.88.in-addr.arpa. (44) |
| 163 |
00:26:45.058409 IP 209.85.135.147 > |
| 164 |
dslb-088-065-173-238.pools.arcor-ip.net: ICMP echo reply, id 4181, seq |
| 165 |
1, length 64 |
| 166 |
00:26:45.074915 IP dns1.arcor-ip.de.domain > |
| 167 |
dslb-088-065-173-238.pools.arcor-ip.net.32865: 37596 1/0/0 (97) |
| 168 |
00:26:45.125930 IP dslb-088-065-173-238.pools.arcor-ip.net.32865 > |
| 169 |
dns1.arcor-ip.de.domain: 10166+ PTR? 11.2.253.145.in-addr.arpa. (43) |
| 170 |
00:26:45.140233 IP dns1.arcor-ip.de.domain > |
| 171 |
dslb-088-065-173-238.pools.arcor-ip.net.32865: 10166 1/0/0 (73) |
| 172 |
00:26:46.040910 IP dslb-088-065-173-238.pools.arcor-ip.net > |
| 173 |
209.85.135.147: ICMP echo request, id 4181, seq 2, length 64 |
| 174 |
00:26:46.065340 IP 209.85.135.147 > |
| 175 |
dslb-088-065-173-238.pools.arcor-ip.net: ICMP echo reply, id 4181, seq |
| 176 |
2, length 64 |
| 177 |
00:26:47.050855 IP dslb-088-065-173-238.pools.arcor-ip.net > |
| 178 |
209.85.135.147: ICMP echo request, id 4181, seq 3, length 64 |
| 179 |
00:26:47.074438 IP 209.85.135.147 > |
| 180 |
dslb-088-065-173-238.pools.arcor-ip.net: ICMP echo reply, id 4181, seq |
| 181 |
3, length 64 |
| 182 |
00:26:48.050866 IP dslb-088-065-173-238.pools.arcor-ip.net > |
| 183 |
209.85.135.147: ICMP echo request, id 4181, seq 4, length 64 |
| 184 |
00:26:48.075412 IP 209.85.135.147 > |
| 185 |
dslb-088-065-173-238.pools.arcor-ip.net: ICMP echo reply, id 4181, seq |
| 186 |
4, length 64 |
| 187 |
00:26:49.060871 IP dslb-088-065-173-238.pools.arcor-ip.net > |
| 188 |
209.85.135.147: ICMP echo request, id 4181, seq 5, length 64 |
| 189 |
00:26:49.084519 IP 209.85.135.147 > |
| 190 |
dslb-088-065-173-238.pools.arcor-ip.net: ICMP echo reply, id 4181, seq |
| 191 |
5, length 64 |
| 192 |
|
| 193 |
16 packets captured |
| 194 |
32 packets received by filter |
| 195 |
0 packets dropped by kernel |
| 196 |
-- |
| 197 |
gentoo-user@g.o mailing list |
Archives