Re: 2.1.102: ipchains: REJECT does only DENY - network gurus please

Steffen Zahn (zahn@berlin.snafu.de)
Sun, 17 May 1998 16:29:12 +0200


>>>>> "Andi" == Andi Kleen <ak@muc.de> writes:

Andi> What it says - there is no output route for iph->saddr. Can you
Andi> ping 192.168.0.2? What is the actual value of saddr/iph->saddr
Andi> on this place?

Yes, I can ping 192.168.0.2 (client taliesin) from 192.168.0.1 (server zahn).
netstat -r gives:
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
192.168.0.0 * 255.255.255.0 U 0 0 0 eth0

May 17 16:15:32 zahn vmunix: icmp_send: ip_route_output(&rt, iph->saddr 200A8C0, saddr 14040C2, RT_TOS(tos), 0)

This means iph->saddr is 192.168.0.2, saddr is 194.64.64.1 .
194.64.64.1 was the destination of the original packet that I want
to reject here.
There is currently no route to the address 194.64.64.1,
only when I am connected to my ISP, that is also the reason why I want to
reject that packet using ipchains.

Steffen

-- 
home email:  user@domain where domain=berlin.snafu.de, user=zahn
Use of my address for unsolicited commercial advertising is forbidden.
      2^3021377 - 1     |     "Where do you want to crash today?"

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu