At 10:25 AM 7/29/02 -0700, Webmaster - Mars Society wrote:
>Setup - BeringRC3. Multiple dedicated IP's connected via Cablemodem. DMZ and
>MASQ'd net
>
>Question 1
[...]
Question 2
>   When a server is masq'd and dnat'd, how can you tell if ping is hitting
>the original ethernet port, or the final server?

Depends on who "you" are.

If you are the end that is pinging, there is no way to know (putting aside 
fancy tools used by crackers, an area I'm not knowledgeable about). All a 
ping is supposed to tell you is that some host responds to that address, 
not any details of what host it is.

If you are the end being pinged ... in the normal course of events, no 
records are kept of ping replies, you you are still out of luck. But if the 
server in question is running firewalling, you can set it to log icmp 
packets, which will let you know if the ping requests actually reach it. 
Or, on the firewall, you can log icmp packets that get forwarded. (At least 
these things are true of Linux servers and firewalls; since you don't say 
what OS your server is running, YMMV at that end.)


--
-----------------------------------------------"Never tell me the 
odds!"--------------
Ray Olszewski                                        -- Han Solo
Palo Alto, California, USA                              [EMAIL PROTECTED]
-------------------------------------------------------------------------------------------



-------------------------------------------------------
This sf.net email is sponsored by: Dice - The leading online job board
for high-tech professionals. Search and apply for tech jobs today!
http://seeker.dice.com/seeker.epl?rel_code=31
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to