Cannot PING LAN
 

I've been staring at this problem for 3 day and i cannot find the answer!

This is my iptables:

firewall:~# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED

Chain FORWARD (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

Chain PREROUTING (policy ACCEPT)
target prot opt source destination

Chain POSTROUTING (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

ifconfig:
eth1 Link encap:Ethernet HWaddr 00:50:FC:F6:C6:5D
inet addr:192.168.1.250 Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:256 errors:0 dropped:0 overruns:0 frame:0
TX packets:3543 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:20214 (19.7 KiB) TX bytes:212580 (207.5 KiB)
Interrupt:18


firewall:~# mii-diag eth1
Basic registers of MII PHY #32: 1100 782d 0000 0000 01e1 45e1 0001 0000.
The autonegotiated capability is 01e0.
The autonegotiated media type is 100baseTx-FD.
Basic mode control register 0x1100: Auto-negotiation enabled.
You have link beat, and everything is working OK.
Your link partner advertised 45e1: Flow-control 100baseTx-FD 100baseTx 10baseT-FD 10baseT, w/ 802.3X flow control.
End of basic transceiver informaion.

firewall:~# arp -an
? (192.168.1.1) at <incomplete> on eth1


NOW - After all this i cannot ping any pc on my local lan. I started off with a strick iptables config and i've trimmed it down to nothing (as you can see) but is still cannot ping the LAN. From this machine i can ping the internet, do all i want (apt-get XXX) everything works - except LAN.

Please any help with this...........

Does it work with iptables turned off? What's netstat -nr show?

netstat -nr : xxx.xxx.xxx.xxx = my public ip gateway
xxx.xxx.xxx.xxx 0.0.0.0 255.255.255.255 UH 0 0 0 ppp0
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
0.0.0.0 xxx.xxx.xxx.xxx 0.0.0.0 UG 0 0 0 ppp0

Also: Does it work with iptables turned off?

Not to be presumptuous but, eth1 indicates the second ethernet interface (eth0 is the first). Are you certain you have the cable plugged into the correct port?

Yeah eth0 is another card - i had the lan in there but had the same problem. so i've just de-configured it.

I connect to this machine via the internet only- it's 1200 km away from me. So if i turn off iptables will i still ba able to connect to it via ssh?

You should be fine as long as you make sure no rules to drop the ssh connection...:) If you flush all rules you basically remove anything that might have dropped the ssh so yes it should still work...

Hi,
have you checked your
- /proc/sys/net/ipv4/icmp_echo_ignore_all
- /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts ?
evelino