[gentoo-user] ARP-Caching of non-link-local adresses

2012-01-04 Thread Peter Pan
Hi list, I'm kind of despair. The history: We recently brought up a new firewall with Gentoo. There are (for my finding) some big nets behind this firewall (1x public /24, 2x public /27, 1x public /26, at least 2 private /24). Filtering is done via iptables and snort should jump as IPS on

Re: [gentoo-user] ARP-Caching of non-link-local adresses

2012-01-04 Thread Pandu Poluan
On Jan 4, 2012 11:20 PM, Peter Pan os...@gmx.net wrote: Hi list, I’m kind of despair. The history: We recently brought up a new firewall with Gentoo. There are (for my finding) some big nets behind this firewall (1x public /24, 2x public /27, 1x public /26, at least 2 private /24).

Re: [gentoo-user] ARP-Caching of non-link-local adresses

2012-01-04 Thread Pandu Poluan
On Jan 5, 2012 12:28 AM, Pandu Poluan pa...@poluan.info wrote: On Jan 4, 2012 11:20 PM, Peter Pan os...@gmx.net wrote: Hi list, I’m kind of despair. The history: We recently brought up a new firewall with Gentoo. There are (for my finding) some big nets behind this firewall

Re: [gentoo-user] ARP-Caching of non-link-local adresses

2012-01-04 Thread Pandu Poluan
On Jan 4, 2012 11:20 PM, Peter Pan os...@gmx.net wrote: Hi list, - 8 snip Can you post the output of ip rule sh? And for every table listed in the above, post the output of ip route sh table $TABLENAME? Rgds,

AW: [gentoo-user] ARP-Caching of non-link-local adresses

2012-01-04 Thread Peter Pan
] Gesendet: Mittwoch, 4. Januar 2012 18:29 An: gentoo-user@lists.gentoo.org Betreff: Re: [gentoo-user] ARP-Caching of non-link-local adresses On Jan 4, 2012 11:20 PM, Peter Pan os...@gmx.net wrote: Hi list, I’m kind of despair. The history: We recently brought up a new firewall

AW: [gentoo-user] ARP-Caching of non-link-local adresses

2012-01-04 Thread Peter Pan
] Gesendet: Mittwoch, 4. Januar 2012 18:56 An: gentoo-user@lists.gentoo.org Betreff: Re: [gentoo-user] ARP-Caching of non-link-local adresses On Jan 4, 2012 11:20 PM, Peter Pan os...@gmx.net wrote: Hi list, - 8 snip Can you post the output of ip rule sh? And for every table listed