Hey I have a strange problem. I mainly use the scripts created by pppsetup (ppp-on and ppp-off) to connect to the net via my 56.6k external modem.

Here is the problem, somtimes it connects and spits out my and the ISPS IP addresses, just like when I get a good connect. Only it just sits there and I can´t even ping the remote IP address.

So I disconnect and re-connect a few times and it works. Then maby I am writing an email or somthing and the connection is idle for a while but it stays connected but when I try to load/ping anything its dead again and I have to disconnect and re-connect for it to work again.

Any ideas?

My /etc/resolv.cof

bash-2.05b$ cat resolv.conf
search wanadoo.es
nameserver 62.37.228.20
nameserver 62.37.228.99

My /etc/rc.d/rc.firewall

bash-2.05b$ cat rc.firewall
#!/bin/sh


#Change the part after the = to the where you IPTABLES is on your system
IPTABLES=/usr/sbin/iptables

#flush existing rules
$IPTABLES -F INPUT

#This allows all data that has been sent out for the computer running the firewall
# to come back
#(for all of ICMP/TCP/UDP).
#For example, if a ping request is made it will allow the reply back
$IPTABLES -A INPUT -j ACCEPT -m state --state ESTABLISHED -i ppp0 -p icmp
$IPTABLES -A INPUT -j ACCEPT -m state --state ESTABLISHED -i ppp0 -p tcp
$IPTABLES -A INPUT -j ACCEPT -m state --state ESTABLISHED -i ppp0 -p udp


#Allow traffic from ethernet adapter eth1 to pass through if
#you have a network, or
#as using linux as a router for internet etc.
#Your first ethernet card is eth0 and the second would be eth1 etc.
#$IPTABLES -A INPUT -i eth1 -j ACCEPT


#Allow incoming FTP requests
#$IPTABLES -A INPUT -p tcp --dport 20 -j ACCEPT
#$IPTABLES -A INPUT -p tcp --dport 21 -j ACCEPT

#Allow incoming SSH requests
$IPTABLES -A INPUT -p tcp --dport 22 -j ACCEPT

#Allow incoming HTTP requests (to Web server)
#$IPTABLES -A INPUT -p tcp --dport 80 -j ACCEPT


#Allow Ping echo
#I have commented this line, so ping from an outside machine will not work.
#Uncomment the next line to make ping from outside work.
#$IPTABLES -A INPUT -p icmp -j ACCEPT


#Drop and log all other data
#The logging is set so if more than 5 packets are dropped in
#three seconds they will be ignored. This helps to prevent a DOS attack
#Crashing the computer the firewall is running on
$IPTABLES -A INPUT -m limit --limit 3/second --limit-burst 5 -i ! lo -j LOG
$IPTABLES -A INPUT -i ! lo -j DROP

#The logs from the firewall are put into your system log file, which can be found at #/var/log/syslog
bash-2.05b$



I am currently conected with kppp which seems to be more reliable... but like the simplicity of ppp-on/off

Adam

im also a fan of the ppp scripts. i use the following modules to make things happen for my setup:

ppp_generic
ppp_deflate
ppp_async

you must have support already for at least ppp_generic for a connection to be made but i had similar problems to yours without ppp_async being loaded. might be worth a look...

Thanks davinki I will have a look at what modules I have loaded and if ppp_async isn´t loaded I will load it and see how it goes!!

Adam

Hey jimdaworm... I'm currently trying to learn iptables myself so I am no where near close to fully understanding them, not even by a long shot... I'm sure you've tried uncommenting some stuff in your script.... Like with allowing your machine to be pinged? Would that make a difference? What if that line is keeping your isp from trying to talk to your computer... Heck, I don't know... Just an idea... Maybe your isp tries to ping your machine every so often to make sure it's still alive... If it doesn't get a response.... It obvious I'm grasping here.. Just thought I'd mention it. I only connect thru my dial-up modem when the power goes out, thus rendering my dsl modem useless, and then I use kppp so I don't know much about it.... I know you've been messing with this for awhile.... I do have these loaded at all times...

ppp_synctty
ppp_async
ppp_generic

Hey jong357 the truth is that I tried reading the documentation for those dammed Iptables and it just screwed my head up. I just downloaded this script and changed some really basic stuff (like eth0 to ppp0) as I don´t really have the brain for this sort of thing.

I dunno maby your right about the pinging thing, but I would have thought it was pretty standard for a firewall to pretend that there is nothing there (Like not respond) to connections you don´t start.

Adam

If using dynamic DNS your ISP may cut you off after a certain time of inactivity.
Look at then ip-up script. uncomment the line for pinging:

Hey gnashley I am starting to wonder if it is somthing to do with my ISP just being crap, it doesn´t actually drop the connection just looks like the ISP stops responding to my modems requests for data.

I was using KPPP today and the same thing happened. I will try what you have said anyway!

Thanks
Adam