Default route apparently overwritten whenever LAN machine is turned on
Linux - NetworkingThis forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
Default route apparently overwritten whenever LAN machine is turned on
Hi there.
Using an adsl connection with rp-pppoe. So far so good (it seems).
Code:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
217.5.98.95 * 255.255.255.255 UH 0 0 0 ppp0
10.0.0.0 * 255.255.255.0 U 0 0 0 eth1
192.168.1.0 * 255.255.255.0 U 0 0 0 eth0
127.0.0.0 * 255.0.0.0 U 0 0 0 lo
default 217.5.98.95 0.0.0.0 UG 0 0 0 ppp0
At first I suspected the adsl setup to be faulty, because whenever I used the machine connected to the server (Mandrake 9.1) to check on it, the default route was changed, leaving the net, of course, unreachable.
Code:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
217.5.98.95 * 255.255.255.255 UH 0 0 0 ppp0
10.0.0.0 * 255.255.255.0 U 0 0 0 eth1
192.168.1.0 * 255.255.255.0 U 0 0 0 eth0
127.0.0.0 * 255.0.0.0 U 0 0 0 lo
default * 0.0.0.0 U 0 0 0 eth0
Judging from the fact that irssi stays connected to the IRC server until right about the time I switch on the machine connected via LAN (actually a simple crossed-over RJ-45 cable) I assume the power-on of that machine prompts the route change on the server.
My question: what could do that? Is there any kind of log that would capture these route changes (more specifically, something that tells me what is responsible for it so I can find a way to make it die slowly and painfully).
If you require any further information, I'll be happy to provide it. Another interesting point may be that this didn't happen before a recent reinstall of Mandrake 9.1. The install is pretty fresh, meaning it's safe to assume standard settings for everything.
> Unfortunatly I'm kinda confused
Sorry, I'll try and clear those things up.
> The mandrake machine is the router for your lan right?
> It appears to have 2 lans cards?
Correct and correct. eth0 is 192.168.1.1, serves the other machine as local gateway to the net. eth1 is connected to the DSL modem and thereby to the rest of the world.
> By turning a machine on your lan, your mandrake route
> is changed?
I'm not entirely positive about that but it's my best guess right now. Might also happen when I establish the (local) ssh connection to it. Remote (i. e. from routable, external IPs) ssh connections do not seem to trigger it. At least remote connections work for a while, even if not excessively tested. May also be that the route gets changed whenever the ssh connection runs through eth0?
> What kind of software / os are you running on the machine that
> changes the route, or is it all the machines ?
Not sure what you mean by "other machines". There are just two machines involved in this, directly connected by a cross-over LAN cable. One (the "server" with the two NICs) runs Mandrake 9.1, yet has no screen attached to it, the other one is a dual boot of Mandrake 9.1 and Windows XP that I use to monitor the "server" with.
> More than likely I could be a rogue service on the
> mandrake machine...
Heh. What are you doing in my machine anyway. Just kidding. Had to exploit that typo somehow.
> Try booting your machine up and just ping
> 66.218.71.198 --> yahoo.com but you should rely on any
> services of the router except forwarding.
Errors that can't be reproduced are so hard to work with. Guess what. I just failed to reproduce it. After shutting down the XP desktop, waiting half a minute and booting it again, everything worked like it was supposed to.
So all I know now is that I have an adsl connection (which btw. gets cut every 24 hours by my ISP) that I never found down, yet I have a routing table that some evil spirit haunts every now and then. When it does happen though, it seems awfully close to the time I turn on the other machine.
> What daemons is the Mandrake running ?
Good question - since that finally led me to type a ps -a and spot a dhcpd that I certainly don't have any use for and might as well have been the source of all evil (from my limited understandings of these things point of view anyway). Killed it on sight.
Others that I found and was able to identify:
31159 ? 00:00:04 sshd
12755 ? 00:00:00 xinetd
17839 ? 00:00:00 dhcpd <--- now dead
12707 ? 00:00:00 crond
14235 ? 00:00:00 smbd
10286 ? 00:00:00 nmbd
26350 ? 00:00:00 httpd2 <--- couple more of those. I did intend to install apache though, even though the webmail I wanted running on it is a source of many more headaches.
20290 ? 00:00:00 adsl-connect <--- OK, not a daemon I guess, but I somehow deemed it relevant enough.
20888 ? 00:00:00 pppd
The Mandrake server was online rock-solid (as I'm told on IRC) for more than three days with a working default route.
The minute I get home from vacation, I switch on the dektop machine and the default route on the server is changed. No internet connection possible anymore and I have 120 seconds to reestablish a correct default route before irssi marks the disconnection from the IRC server.
Please give me a way, ANY way, to figure out what kind of wicked piece of software is responsible for changing the default route. Is there no kind of logging I can switch on that'll enable me to see and shoot the bugger on sight?
Hmmmm, no ideas? Do I have to go back to Win2k? Very sad. Things were alright before I reinstalled Mandrake, now it can't even keep its routes straight. And it's in all likelihood a very simple thing. One process to kill or one setting to change. Oh well.
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.