• Willkommen im Linux Club - dem deutschsprachigen Supportforum für GNU/Linux. Registriere dich kostenlos, um alle Inhalte zu sehen und Fragen zu stellen.

[gelöst]rechner kommt nicht über 2. rechner mit inetrouter i

N

nightcrawler

hi, hab nach der anleitung mein kleines netzwerk konfiguriert:

http://www.linux-club.de/faq/Linux-Firewall_hinter_Hardware-Router

inetrouter = 192.168.2.1
arbeitsplatzrechner -> router = 192.168.2.23 standartgateway 192.168.2.1 nameserver 192.168.2.1 ip-weiterleitung an
arbeitsplatzrechner -> webserver = 192.168.3.1 standartgateway 192.168.2.1 ip-weiterleitung an
webserver = 192.168.2.25 standartgateway 192.168.3.1 nameserver 192.168.2.1

leider kriege ich keine verbindung vom webserver zum arbeitsplatzrechner und ins inet.

was bis jetzt probiert wurde:
webserver ping 192.168.3.1 = 'network is unreachable'
webserver ping 192.168.2.23 = 'destination host unreachable'
arbeitsplatzrechner ping 192.168.2.25 = 'destination host unreachable'

ein problem am webserver schließ ich aus, da er wenn er direkt mit dem inetrouter verbunden ist (und auf 192.168.2.1 geroutet) ins internet geht... kabel und karten sind ok.

etho=arbeitsplatzrechner -> inetrouter
eth1=arbeitsplatzrechner -> webserver
 
OP
N

nightcrawler

meine vermutung ist, das in der routingtabelle etwas nicht stimmt...

collectNWData sagt:

Code: 
collectNWData.sh 0.3.4
Invocation parameters: 

*** uname -a 
Linux arbeitsplatz 2.6.11.4-21.15-smp #1 SMP Tue Nov 28 13:39:58 UTC 2006 i686 i686 i386 GNU/Linux

*** cat /etc/SuSE-release 
SuSE Linux 9.3 (i586)
VERSION = 9.3

*** cat /etc/resolv.conf | grep -v "^#" | grep -v "^$" 
nameserver 192.168.2.1
search site

*** cat /etc/hosts | grep -v "^#" | grep -v "^$" | grep -v "::" 
127.0.0.1       localhost
192.168.2.23    arbeitsplatz.site arbeitsplatz
192.168.3.1     arbeitsplatz.site
192.168.3.2     arbeitsplatz.site
192.168.3.3     arbeitsplatz.site
192.168.3.4     arbeitsplatz.site

*** cat /proc/sys/net/ipv4/ip_forward 
1

*** iptables -t nat -L 
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination         

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination         
MASQUERADE  all  --  anywhere             anywhere            

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

*** route -n 
Kernel IP Routentabelle
Ziel            Router          Genmask         Flags Metric Ref    Use Iface
192.168.3.0     0.0.0.0         255.255.255.0   U     0      0        0 eth1
192.168.3.0     0.0.0.0         255.255.255.0   U     0      0        0 eth2
192.168.3.0     0.0.0.0         255.255.255.0   U     0      0        0 eth3
192.168.3.0     0.0.0.0         255.255.255.0   U     0      0        0 eth4
192.168.2.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
169.254.0.0     0.0.0.0         255.255.0.0     U     0      0        0 eth0
127.0.0.0       0.0.0.0         255.0.0.0       U     0      0        0 lo
0.0.0.0         192.168.2.1     0.0.0.0         UG    0      0        0 eth0

*** ifconfig 
eth0      Protokoll:Ethernet  Hardware Adresse 00:08:C7:82:A2:69  
          inet Adresse:192.168.2.23  Bcast:192.168.2.255  Maske:255.255.255.0
          inet6 Adresse: fe80::208:c7ff:fe82:a269/64 Gültigkeitsbereich:Verbindung
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:5867 errors:0 dropped:0 overruns:0 frame:0
          TX packets:13944 errors:245 dropped:0 overruns:0 carrier:245
          collisions:0 Sendewarteschlangenlänge:1000 
          RX bytes:3018367 (2.8 Mb)  TX bytes:2152024 (2.0 Mb)

eth1      Protokoll:Ethernet  Hardware Adresse 00:80:C8:B9:17:C9  
          inet Adresse:192.168.3.1  Bcast:192.168.3.255  Maske:255.255.255.0
          inet6 Adresse: fe80::280:c8ff:feb9:17c9/64 Gültigkeitsbereich:Verbindung
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:9275 errors:6 dropped:0 overruns:0 frame:0
          TX packets:355 errors:217 dropped:0 overruns:0 carrier:217
          collisions:0 Sendewarteschlangenlänge:1000 
          RX bytes:556500 (543.4 Kb)  TX bytes:33124 (32.3 Kb)
          Interrupt:193 Basisadresse:0x5000 

eth2      Protokoll:Ethernet  Hardware Adresse 00:80:C8:B9:17:CA  
          inet Adresse:192.168.3.2  Bcast:192.168.3.255  Maske:255.255.255.0
          inet6 Adresse: fe80::280:c8ff:feb9:17ca/64 Gültigkeitsbereich:Verbindung
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:4 errors:1 dropped:0 overruns:0 frame:0
          TX packets:127 errors:435 dropped:0 overruns:0 carrier:435
          collisions:0 Sendewarteschlangenlänge:1000 
          RX bytes:240 (240.0 b)  TX bytes:11752 (11.4 Kb)
          Interrupt:185 Basisadresse:0x5080 

eth3      Protokoll:Ethernet  Hardware Adresse 00:80:C8:B9:17:CB  
          inet Adresse:192.168.3.3  Bcast:192.168.3.255  Maske:255.255.255.0
          inet6 Adresse: fe80::280:c8ff:feb9:17cb/64 Gültigkeitsbereich:Verbindung
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:7 errors:1 dropped:0 overruns:0 frame:0
          TX packets:127 errors:423 dropped:0 overruns:0 carrier:423
          collisions:0 Sendewarteschlangenlänge:1000 
          RX bytes:420 (420.0 b)  TX bytes:11557 (11.2 Kb)
          Interrupt:201 Basisadresse:0x5400 

eth4      Protokoll:Ethernet  Hardware Adresse 00:80:C8:B9:17:CC  
          inet Adresse:192.168.3.4  Bcast:192.168.3.255  Maske:255.255.255.0
          inet6 Adresse: fe80::280:c8ff:feb9:17cc/64 Gültigkeitsbereich:Verbindung
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:454 errors:3 dropped:0 overruns:0 frame:0
          TX packets:424 errors:100 dropped:0 overruns:0 carrier:100
          collisions:0 Sendewarteschlangenlänge:1000 
          RX bytes:27240 (26.6 Kb)  TX bytes:39140 (38.2 Kb)
          Interrupt:209 Basisadresse:0x5480 

lo        Protokoll:Lokale Schleife  
          inet Adresse:127.0.0.1  Maske:255.0.0.0
          inet6 Adresse: ::1/128 Gültigkeitsbereich:Maschine
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:7221 errors:0 dropped:0 overruns:0 frame:0
          TX packets:7221 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 Sendewarteschlangenlänge:0 
          RX bytes:795089 (776.4 Kb)  TX bytes:795089 (776.4 Kb)


*** pingMyLocalIPs 
192.168.2.23 : Ping response
192.168.3.1 : Ping response
192.168.3.2 : Ping response
192.168.3.3 : Ping response
192.168.3.4 : Ping response
127.0.0.1 : Ping response

*** ping -c1 -W 3 195.135.220.3 
PING 195.135.220.3 (195.135.220.3) 56(84) bytes of data.
64 bytes from 195.135.220.3: icmp_seq=1 ttl=55 time=41.5 ms

--- 195.135.220.3 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 41.537/41.537/41.537/0.000 ms

*** ping -c1 -W 3 www.suse.de 
PING turing.suse.de (195.135.220.3) 56(84) bytes of data.
64 bytes from turing.suse.de (195.135.220.3): icmp_seq=1 ttl=55 time=41.1 ms

--- turing.suse.de ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 41.193/41.193/41.193/0.000 ms

*** lspci 
0000:00:00.0 Host bridge: Intel Corporation 440BX/ZX/DX - 82443BX/ZX/DX Host bridge (rev 02)
0000:00:01.0 PCI bridge: Intel Corporation 440BX/ZX/DX - 82443BX/ZX/DX AGP bridge (rev 02)
0000:00:0b.0 SCSI storage controller: LSI Logic / Symbios Logic 53c875 (rev 04)
0000:00:0c.0 Ethernet controller: Intel Corporation 82557/8/9 [Ethernet Pro 100] (rev 05)
0000:00:0e.0 VGA compatible controller: Matrox Graphics, Inc. MGA 2164W [Millennium II]
0000:00:0f.0 PCI bridge: Digital Equipment Corporation DECchip 21152 (rev 03)
0000:00:14.0 ISA bridge: Intel Corporation 82371AB/EB/MB PIIX4 ISA (rev 02)
0000:00:14.1 IDE interface: Intel Corporation 82371AB/EB/MB PIIX4 IDE (rev 01)
0000:00:14.2 USB Controller: Intel Corporation 82371AB/EB/MB PIIX4 USB (rev 01)
0000:00:14.3 Bridge: Intel Corporation 82371AB/EB/MB PIIX4 ACPI (rev 02)
0000:02:04.0 Ethernet controller: Digital Equipment Corporation DECchip 21142/43 (rev 41)
0000:02:05.0 Ethernet controller: Digital Equipment Corporation DECchip 21142/43 (rev 41)
0000:02:06.0 Ethernet controller: Digital Equipment Corporation DECchip 21142/43 (rev 41)
0000:02:07.0 Ethernet controller: Digital Equipment Corporation DECchip 21142/43 (rev 41)

*** lsusb 
Bus 001 Device 001: ID 0000:0000  

*** iptables -L -vn 
Chain INPUT (policy DROP 5 packets, 526 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 7090  785K ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0           
 3213 1524K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    5   525 input_int  all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
    5   525 input_int  all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           
    5   525 input_int  all  --  eth3   *       0.0.0.0/0            0.0.0.0/0           
    5   525 input_int  all  --  eth4   *       0.0.0.0/0            0.0.0.0/0           
   12   950 input_ext  all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 5 LOG flags 6 level 4 prefix `SFW2-IN-ILL-TARGET ' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 TCPMSS     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x06/0x02 TCPMSS clamp to PMTU 
    0     0 forward_int  all  --  eth1   *       0.0.0.0/0            0.0.0.0/0           
    0     0 forward_int  all  --  eth2   *       0.0.0.0/0            0.0.0.0/0           
    0     0 forward_int  all  --  eth3   *       0.0.0.0/0            0.0.0.0/0           
    0     0 forward_int  all  --  eth4   *       0.0.0.0/0            0.0.0.0/0           
    0     0 forward_ext  all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 5 LOG flags 6 level 4 prefix `SFW2-FWD-ILL-ROUTING ' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 5 packets, 526 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 7090  785K ACCEPT     all  --  *      lo      0.0.0.0/0            0.0.0.0/0           
12117 1698K ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state NEW,RELATED,ESTABLISHED 
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 5 LOG flags 6 level 4 prefix `SFW2-OUT-ERROR ' 

Chain forward_ext (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED icmp type 0 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED icmp type 3 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED icmp type 11 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED icmp type 12 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED icmp type 14 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED icmp type 18 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED icmp type 3 code 2 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED icmp type 5 
    0     0 ACCEPT     all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           state NEW,RELATED,ESTABLISHED 
    0     0 ACCEPT     all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 LOG        tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 5 tcp flags:0x16/0x02 LOG flags 6 level 4 prefix `SFW2-FWDext-DROP-DEFLT ' 
    0     0 LOG        icmp --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 5 LOG flags 6 level 4 prefix `SFW2-FWDext-DROP-DEFLT ' 
    0     0 LOG        udp  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 5 LOG flags 6 level 4 prefix `SFW2-FWDext-DROP-DEFLT ' 
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 5 state INVALID LOG flags 6 level 4 prefix `SFW2-FWDext-DROP-DEFLT-INV ' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain forward_int (4 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED icmp type 0 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED icmp type 3 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED icmp type 11 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED icmp type 12 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED icmp type 14 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED icmp type 18 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED icmp type 3 code 2 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED icmp type 5 
    0     0 ACCEPT     all  --  *      eth0    0.0.0.0/0            0.0.0.0/0           state NEW,RELATED,ESTABLISHED 
    0     0 ACCEPT     all  --  eth0   *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 LOG        tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 5 tcp flags:0x16/0x02 LOG flags 6 level 4 prefix `SFW2-FWDint-DROP-DEFLT ' 
    0     0 LOG        icmp --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 5 LOG flags 6 level 4 prefix `SFW2-FWDint-DROP-DEFLT ' 
    0     0 LOG        udp  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 5 LOG flags 6 level 4 prefix `SFW2-FWDint-DROP-DEFLT ' 
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 5 state INVALID LOG flags 6 level 4 prefix `SFW2-FWDint-DROP-DEFLT-INV ' 
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain input_ext (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           PKTTYPE = broadcast 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 4 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED icmp type 0 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED icmp type 3 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED icmp type 11 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED icmp type 12 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED icmp type 14 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED icmp type 18 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED icmp type 3 code 2 
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED icmp type 5 
    0     0 LOG        tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 5 tcp dpt:45823 flags:0x16/0x02 LOG flags 6 level 4 prefix `SFW2-INext-ACC-TCP ' 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:45823 
    0     0 LOG        tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 5 tcp dpt:45824 flags:0x16/0x02 LOG flags 6 level 4 prefix `SFW2-INext-ACC-TCP ' 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:45824 
    0     0 LOG        tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 5 tcp dpt:45825 flags:0x16/0x02 LOG flags 6 level 4 prefix `SFW2-INext-ACC-TCP ' 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:45825 
    0     0 LOG        tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 5 tcp dpt:45826 flags:0x16/0x02 LOG flags 6 level 4 prefix `SFW2-INext-ACC-TCP ' 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:45826 
    0     0 LOG        tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 5 tcp dpt:45827 flags:0x16/0x02 LOG flags 6 level 4 prefix `SFW2-INext-ACC-TCP ' 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:45827 
    0     0 LOG        tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 5 tcp dpt:45828 flags:0x16/0x02 LOG flags 6 level 4 prefix `SFW2-INext-ACC-TCP ' 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:45828 
    0     0 LOG        tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 5 tcp dpt:45829 flags:0x16/0x02 LOG flags 6 level 4 prefix `SFW2-INext-ACC-TCP ' 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:45829 
    0     0 LOG        tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 5 tcp dpt:45830 flags:0x16/0x02 LOG flags 6 level 4 prefix `SFW2-INext-ACC-TCP ' 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:45830 
    7   420 LOG        tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 5 tcp dpt:80 flags:0x16/0x02 LOG flags 6 level 4 prefix `SFW2-INext-ACC-TCP ' 
    7   420 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 
    0     0 reject_func  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:113 state NEW 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:45823 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:45824 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:45825 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:45826 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:45827 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:45828 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:45829 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:45830 
    0     0 LOG        tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 5 tcp flags:0x16/0x02 LOG flags 6 level 4 prefix `SFW2-INext-DROP-DEFLT ' 
    0     0 LOG        icmp --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 5 LOG flags 6 level 4 prefix `SFW2-INext-DROP-DEFLT ' 
    5   530 LOG        udp  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 5 LOG flags 6 level 4 prefix `SFW2-INext-DROP-DEFLT ' 
    0     0 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0           limit: avg 3/min burst 5 state INVALID LOG flags 6 level 4 prefix `SFW2-INext-DROP-DEFLT-INV ' 
    5   530 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain input_int (4 references)
 pkts bytes target     prot opt in     out     source               destination         
   20  2100 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain reject_func (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with tcp-reset 
    0     0 REJECT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-port-unreachable 
    0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-proto-unreachable 

*** cat /etc/sysconfig/SuSEfirewall2 | grep -v "^#" | grep -v "^$" 
FW_DEV_EXT="eth-id-00:08:c7:82:a2:69"
FW_DEV_INT="eth-id-00:80:c8:b9:17:c9 eth-id-00:80:c8:b9:17:ca eth-id-00:80:c8:b9:17:cb eth-id-00:80:c8:b9:17:cc"
FW_DEV_DMZ=""
FW_ROUTE="yes"
FW_MASQUERADE="yes"
FW_MASQ_DEV="$FW_DEV_EXT"
FW_MASQ_NETS="0/0"
FW_PROTECT_FROM_INT="no"
FW_SERVICES_EXT_TCP="45823 45824 45825 45826 45827 45828 45829 45830 http"
FW_SERVICES_EXT_UDP="45823 45824 45825 45826 45827 45828 45829 45830"
FW_SERVICES_EXT_IP=""
FW_SERVICES_EXT_RPC=""
FW_SERVICES_DMZ_TCP=""
FW_SERVICES_DMZ_UDP=""
FW_SERVICES_DMZ_IP=""
FW_SERVICES_DMZ_RPC=""
FW_SERVICES_INT_TCP=""
FW_SERVICES_INT_UDP=""
FW_SERVICES_INT_IP=""
FW_SERVICES_INT_RPC=""
FW_SERVICES_DROP_EXT=""
FW_SERVICES_REJECT_EXT="0/0,tcp,113"
FW_SERVICES_ACCEPT_EXT=""
FW_TRUSTED_NETS=""
FW_ALLOW_INCOMING_HIGHPORTS_TCP=""
FW_ALLOW_INCOMING_HIGHPORTS_UDP=""
FW_FORWARD=""
FW_FORWARD_MASQ=""
FW_REDIRECT=""
FW_LOG_DROP_CRIT="yes"
FW_LOG_DROP_ALL="no"
FW_LOG_ACCEPT_CRIT="yes"
FW_LOG_ACCEPT_ALL="no"
FW_LOG_LIMIT=""
FW_LOG=""
FW_KERNEL_SECURITY="yes"
FW_STOP_KEEP_ROUTING_STATE="no"
FW_ALLOW_PING_FW="yes"
FW_ALLOW_PING_DMZ="no"
FW_ALLOW_PING_EXT="no"
FW_ALLOW_FW_SOURCEQUENCH=""
FW_ALLOW_FW_BROADCAST_EXT=""
FW_ALLOW_FW_BROADCAST_INT=""
FW_ALLOW_FW_BROADCAST_DMZ=""
FW_IGNORE_FW_BROADCAST_EXT="yes"
FW_IGNORE_FW_BROADCAST_INT="no"
FW_IGNORE_FW_BROADCAST_DMZ="no"
FW_ALLOW_CLASS_ROUTING=""
FW_CUSTOMRULES=""
FW_REJECT=""
FW_HTB_TUNE_DEV=""
FW_IPv6=""
FW_IPv6_REJECT_OUTGOING=""
FW_IPSEC_TRUST="no"
FW_ZONES=""

*** iwconfig | sed "s/\(Encryption key:\)\([^o][^f][^f][^ ]*\)\(.*\)/\1xx xxx-xxxx-xxxx-xxxx-xxxx-xxxxxxx\3/" 

*** catMyConfig 
*** cat /etc/sysconfig/network/ifcfg-eth-id-00:08:c7:82:a2:69
BOOTPROTO='static'
BROADCAST='192.168.2.255'
IPADDR='192.168.2.23'
MTU=''
NAME='Compaq NC3161 Fast Ethernet NIC'
NETMASK='255.255.255.0'
NETWORK='192.168.2.0'
REMOTE_IPADDR=''
STARTMODE='auto'
UNIQUE='JNkJ.Xe23roxbcXC'
USERCONTROL='yes'
_nm_name='bus-pci-0000:00:0c.0'
PREFIXLEN=''

*** cat /etc/sysconfig/network/ifcfg-eth-id-00:80:c8:b9:17:c9
BOOTPROTO='static'
BROADCAST='192.168.3.255'
IPADDR='192.168.3.1'
MTU=''
NAME='D-Link DFE-570TX Quad Fast Ethernet'
NETMASK='255.255.255.0'
NETWORK='192.168.3.0'
REMOTE_IPADDR=''
STARTMODE='auto'
UNIQUE='JNkJ.h3yYMd+KhjC'
USERCONTROL='yes'
_nm_name='bus-pci-0000:02:04.0'

*** cat /etc/sysconfig/network/ifcfg-eth-id-00:80:c8:b9:17:ca
BOOTPROTO='static'
BROADCAST='192.168.3.255'
IPADDR='192.168.3.2'
MTU=''
NAME='D-Link DFE-570TX Quad Fast Ethernet'
NETMASK='255.255.255.0'
NETWORK='192.168.3.0'
REMOTE_IPADDR=''
STARTMODE='auto'
UNIQUE='mY_N.h3yYMd+KhjC'
USERCONTROL='yes'
_nm_name='bus-pci-0000:02:05.0'
PREFIXLEN=''

*** cat /etc/sysconfig/network/ifcfg-eth-id-00:80:c8:b9:17:cb
BOOTPROTO='static'
BROADCAST='192.168.3.255'
IPADDR='192.168.3.3'
MTU=''
NAME='D-Link DFE-570TX Quad Fast Ethernet'
NETMASK='255.255.255.0'
NETWORK='192.168.3.0'
REMOTE_IPADDR=''
STARTMODE='auto'
UNIQUE='DkES.h3yYMd+KhjC'
USERCONTROL='yes'
_nm_name='bus-pci-0000:02:06.0'
PREFIXLEN=''

*** cat /etc/sysconfig/network/ifcfg-eth-id-00:80:c8:b9:17:cc
BOOTPROTO='static'
BROADCAST='192.168.3.255'
IPADDR='192.168.3.4'
MTU=''
NAME='D-Link DFE-570TX Quad Fast Ethernet'
NETMASK='255.255.255.0'
NETWORK='192.168.3.0'
REMOTE_IPADDR=''
STARTMODE='auto'
UNIQUE='gvUW.h3yYMd+KhjC'
USERCONTROL='yes'
_nm_name='bus-pci-0000:02:07.0'
PREFIXLEN=''

*** cat /etc/sysconfig/network/ifcfg-lo
IPADDR=127.0.0.1
NETMASK=255.0.0.0
NETWORK=127.0.0.0
BROADCAST=127.255.255.255
STARTMODE=onboot
USERCONTROL=no
Zum Vergrößern anklicken....
 
S

stummel

Hallo nightcrawler,

ich muß gestehen das ich aus deinem Text heraus gar nicht so genau verstehe was du da eigentlich für ein Konstrukt fabrizieren willst, dazu bedürfte es vielleicht mal einer Grafik um dir wirklich helfen zu können.
 
OP
N

nightcrawler

ist wirklich etwas schwierig zu verstehen...

das ganze sieht so aus:

internetrouter <-> arbeitsplatzrechner <-> webserver

=

192.168.2.1 <-> 192.168.2.23/192.168.3.1 <-> 192.168.2.25

vom arbeitsplatzrechner kann ich nicht zum webserver pingen und andersrum auch nicht.
 
OP
N

nightcrawler

webserver hat 192.168.3.0 standartgateway 192.168.2.1 (oder muss es 192.168.3.1 sein?)
der router hat ne statische route über 192.168.2.23 - ist das richtig? oder muss ich da 192.168.3.1 eintragen?
am problem des anpingen von arbeitsplatzrechner und webserver und andersrum hat sich leider noch nichts geändert...

vieleicht hätte ich mir doch n switch kaufen sollen... :evil:

hat jemand infos (n link) zum thema 'kompatible ip-adressen'?
 
framp

framp

Moderator
Teammitglied
Nee, da brauchst Du keinen Switch. Linux als Router kann das auch. Nur muss der richtig konfiguriert werden ;-)

Was mir so auffällt:

1) Du hast ne Menge NICs in Deiner Kiste. Die führen alle ins selbe Netz. Das geht so nicht :roll: . Deaktiviere mal alle bis auf die an der der Webserver hängt
2) *.*.*.0 und *.*.*.255 Adressen sind vorbelegt und dürfen nicht bentzt werden!
webserver hat 192.168.3.0
Zum Vergrößern anklicken....
3) Bei der Defaultroute sollte 192.168.3.1 stehen (und 1) beachten!)
 
OP
N

nightcrawler

hab wohl große defiziete in dem bereich und werd mich jetzt in professionelle hilfe begeben ;) hätt ich mir mal n switch gekauft...
 
framp

framp

Moderator
Teammitglied
Wir bekommen das auch hier hin :roll: . Nur ist dazu etwas Geduld Deinerseits required. Aber Du hast Dich ja entschieden.

Bitte den Thread auf gelöst setzen.
 
Du musst dich einloggen oder registrieren, um hier zu antworten.
Oben