Re: [gentoo-user] Re: Curious ping problem with no FW

[Mick <michaelkintzios@gmail.com>]

[-- Attachment #1: Type: text/plain, Size: 1511 bytes --]

On Tuesday 22 July 2008, Harry Putnam wrote:
> Mick <michaelkintzios@gmail.com> writes:

> > It may be worth checking your router's firewall rules once more.  Is the
> > gentoo box connected to the router in the same fashion as the MSWindows
> > boxen, or is it in some funny DMZ set up?
>
> The section involving blocking has nothing whatever set.

OK, but is NATing configured the same way for both Linux & MS Windows 
machines?

> > What do the firewall logs show?
>
> Since there is nothing outgoing set to log, it says nothing.

Does your router give you the option to log outgoing packets, or monitor them 
in real time?

> Here I see:
>   sysctl -a|grep 'net.*icmp'
>
>   net.ipv4.icmp_echo_ignore_all = 0

That's how it should be if you want your Linux box to respond to pings.

>   net.ipv4.icmp_echo_ignore_broadcasts = 1
>   net.ipv4.icmp_ignore_bogus_error_responses = 1
>   net.ipv4.icmp_errors_use_inbound_ifaddr = 0
>   net.ipv4.icmp_ratelimit = 250
>   net.ipv4.icmp_ratemask = 6168

Nothing amiss here either.

Have you tried going back to basics:  unplug the MSWindows box from your 
router and plug your Linux box in the same port to see if you can ping 
internet addresses.

Can you ping the IP address of ftp.ucsb.edu; i.e. 128.111.24.43 (although I 
would expect that if your linux had DSN problems you wouldn't be able to 
browse from it altogether.

What does traceroute show and how does this compare with traceroute -T? 
-- 
Regards,
Mick

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 197 bytes --]