I upgraded my home network router/firewall to RH8.  NAT is working
perfectly and hosts on the LAN can connect to the Internet.  However,
programs on the router itself cannot connect to anything.  If I use a
hostname that's not in /etc/hosts, it *instantly* says the hostname
lookup failed.  If the name is in /etc/hosts, the lookup succeeds but
then the connection times out.  If I use numeric addresses, it also
times out.  I can't connect to anything on the internal or external
networks, not even as root.

But *routing* of packets continues to work just fine!  So it can't be a
problem with the routing table, right?

It has got to be something simple I have overlooked.  Somebody PLEASE
help me, I am pulling my hair out. :o)


Here are the details:

I flushed the OUTPUT chain and changed its policy to ACCEPT.  The first
rule in the INPUT chain accepts established & related.  No joy.

/etc/host.conf contains 'order hosts,bind'.

/etc/resolv.conf contains exactly the same nameservers the hosts on the
LAN are getting from the dhcpd on the router, plus a 'search' statement
with what I assume is the hostname my ISP has assigned me.

# netstat -r
Kernel IP routing table
Destination     Gateway         Genmask         Flags   MSS Window  irtt
Iface
192.168.1.0     *               255.255.255.0   U        40 0          0
eth1
68.54.20.0      *               255.255.254.0   U        40 0          0
eth0
127.0.0.0       *               255.0.0.0       U        40 0          0
lo
default         68.54.20.1      0.0.0.0         UG       40 0          0
eth0

# ifconfig eth0
eth0      Link encap:Ethernet  HWaddr XX:XX:XX:XX:XX:XX  
          inet addr:68.54.21.XX  Bcast:68.54.21.255  Mask:255.255.254.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1825751 errors:1 dropped:0 overruns:0 frame:1
          TX packets:1034919 errors:0 dropped:0 overruns:0 carrier:0
          collisions:1537 txqueuelen:100 
          RX bytes:384340324 (366.5 Mb)  TX bytes:149228183 (142.3 Mb)
          Interrupt:11 Base address:0x1000 

(real values changed to X's for my paranoia)



-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to