Hi list,
Having an odd occurence with masq.
When i ping from inside the firewall I see one ping go out the
external interface but two come back. One of them is addressed to the
internal ip. What could be causing this?
setup is simple:
I have two providers balanced equally. Both display the same behaviour.
eth0 - internal 192.168.0.0/24
eth1 - external
eth2 - 192.168.3.2/24 (goes to another router then out to internet)
masq file is:
eth1 eth0
eth2 eth0
In the packets going out I can't see any mention of the internal ip.
What is going on?
Wireshark shows this from eth2 on the firewall:
No. Time Source Destination Protocol Info
3 0.000387 192.168.3.2 66.102.7.99 ICMP
Echo (p ing) request
Frame 3 (98 bytes on wire, 98 bytes captured)
Ethernet II, Src: D-Link_c7:13:03 (00:11:95:c7:13:03), Dst:
Siig_dc:0d:ed (00:00 :ba:dc:0d:ed)
Internet Protocol, Src: 192.168.3.2 (192.168.3.2), Dst: 66.102.7.99
(66.102.7.99 )
Internet Control Message Protocol
No. Time Source Destination Protocol Info
4 0.181311 66.102.7.99 192.168.3.2 ICMP
Echo (p ing) reply
Frame 4 (98 bytes on wire, 98 bytes captured)
Ethernet II, Src: Siig_dc:0d:ed (00:00:ba:dc:0d:ed), Dst:
D-Link_c7:13:03 (00:11 :95:c7:13:03)
Internet Protocol, Src: 66.102.7.99 (66.102.7.99), Dst: 192.168.3.2
(192.168.3.2 )
Internet Control Message Protocol
No. Time Source Destination Protocol Info
5 0.181414 66.102.7.99 192.168.0.30 ICMP
Echo (p ing) reply
Frame 5 (98 bytes on wire, 98 bytes captured)
Ethernet II, Src: D-Link_c7:13:03 (00:11:95:c7:13:03), Dst:
Siig_dc:0d:ed (00:00 :ba:dc:0d:ed)
Internet Protocol, Src: 66.102.7.99 (66.102.7.99), Dst: 192.168.0.30
(192.168.0. 30)
Internet Control Message Protocol
Regards,
denmat
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users
