You are not logged in.

#1 2010-09-20 09:32:01

Franek
Member
Registered: 2010-05-16
Posts: 100

[solved] shared connection (using ipkungfu/iptables) stopped worki ...

Update: After one more reboot, everything is working again for some mysterious reason.


I have got two computers (one laptop) connected with a crossover cable, the first of which shares its internet connection to the second using the iptables-frontend ipkungfu*. In terms of configuration, this is done by
- specifying the interface to the second computer as INT_NET in /etc/ipkungfu/ipkungfu.conf (INT_NET="eth0" in my case).
- setting GATEWAY=1 in /etc/ipkungfu/ipkungfu.conf .
No configuration is needed on the second machine.
*http://aur.archlinux.org/packages.php?ID=19608

Yesterday, this stopped working all of a sudden in the middle of happy usage. One second everything was up and running, next second I could not access the internet (I can still ping/ssh the first computer, though). Restarting ipkungfu, /etc/rc.d/network, wicd or the entire system on either computer did  not help.

Various cryptic (to me) errors appear in the first machine's /var/log/iptables.log, apparently only related to the  e x t e r n a l  interface eth1 :

Yesterday:
Sep 19 16:22:55 localhost kernel: IPKF_New_Not_SYN: IN=eth1 OUT= MAC=00:26:54:08:01:40:00:0f:b5:10:58:f6:08:00 SRC=87.255.33.147 DST=192.168.0.5 LEN=1440 TOS=0x00 PREC=0x00 TTL=54 ID=33469 DF PROTO=TCP SPT=80 DPT=34499 WINDOW=108 RES=0x00 ACK URGP=0

Today:
Sep 19 18:03:09 localhost kernel: IPKF_Spoof: IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff
:00:c0:9f:42:85:94:08:00 SRC=192.168.0.3 DST=255.255.255.255 LEN=328 TOS=0x00 PR
EC=0x00 TTL=128 ID=84 PROTO=UDP SPT=68 DPT=67 LEN=308

Occasionally:
Sep 19 16:52:36 localhost kernel: IPKF_Invalid_TCP_Flag: IN=eth1 OUT= MAC=00:26:54:08:01:40:00:0f:b5:10:58:f6:08:00 SRC=87.255.33.147 DST=192.168.0.5 LEN=40 TOS=0x00 PREC=0x00 TTL=254 ID=0 DF PROTO=TCP SPT=80 DPT=34499 WINDOW=0 RES=0x00 RST URGP=0

Does anyone have any idea what could have happened and how I can fix this?

Last edited by Franek (2010-09-20 15:02:32)

Offline

Board footer

Powered by FluxBB