On 09/02/07, Chava Leviatan <[EMAIL PROTECTED]> wrote:

 Yes, I tried to check the logs .
I also put an exit statement as the first line of ifdown - it seems to be
semi helpul. The interfaces and the static route
were still up ,but the ip_forwar was set to 0. I intend to skip the
ip_forward cde in the network script.


Then dump the process table from inside ifdown and try to find its ancestor
chain, or other programs which would look suspicious. Make sure you provide
ps or pstree with options to dump as much as possible (e.g. "ps -wweLFM", or
a similar combination).
Also try to look at the part of the kernel that handles ip_forward and see
how you can make it spew trace messages when it's called.

I just wonder who calls the ifdown script ?


See above.

When I install the machine I did not put any firewall (checked the
no-firewall box) since this machine does not
get out at all - maybe this is how Linux accomodates the lack of firewall
?


It's Linux, not Windows :).

--Amos

Reply via email to