Dear all,

on Mandrake 10.1 *86

I have a problem with my local net config.

I am using a gateway zyxel 660 to connect to the web via
eth0 (realtek) :
ip 192.168.1.2
mask 255.255.255.0
gateway 192.168.1.1 (zyxel 660)

this is fine I am connected without problem
after setuping the zyxel via
#htp://192.168.1.1
using pppoA protocol my username and password
provider : ttnet.net.tr and two DNS 212.156.4.4 212.156.4.20
there is a firewall as well which block all port apparently

I have another ethernet card Myson 803 (eth1)
with two PC connected (windows xp)
ip eth1 :192.168.1.3
mask 255.255.255.0
gateway 192.168.1.1 (zyxel 660)

I runned the wizard "sharing connection without success
both computer are using DHCP and I try to assign IP adress
192.168.1.4 & 5 for instance and DNS from provider... no way
both computer see each other via eth1 share file but are not connected to the web

any idea ?


regards


Jean-Luc Regnier

The XP's should have 192.168.1.3 as gateway.

- Peder

Dear Peder,

Yes I tried it but did not work
The whatever the gateway 192.168.1.3 (eth1) or other
both PC can access to the web via eth1.
Sound that there is a problem with Zyxel 660 gateway
or something is missing ?
Anyway thanks for answering

All the best
Jean-Luc

If you have 192.168.1.3 as gateway on the XP's there could be a DNS problem.
See if you can ping 192.168.1.1 from the XP's. If that works then the sharing works.
If not, make sure you can ping it from your Mandrake box (perhaps the Zyxel rejects ping altogether).

If the above works, try pinging 212.43.244.30, 128.252.19.2 or 192.36.125.18 from XP.
If that works, add 212.156.4.4 as DNS on the XP's.

- Peder

Dear Peder,

Ok so

DNS on mandrake box: 212.156.4.4 and 212.156.4.20

I can ping from the mandrake box 192.168.1.1 (router zyxel)
I can ping from the mandrake box 192.168.1.2 (eth0 connected to zyxel)
gateway 192.168.1.1
I can ping from the mandrake box 192.168.1.3 (eth1 local net)
gateway 192.168.1.1
I can not ping 192.168.1.4 and 192.168.1.5



ip of my two PC xp and windows 2000 (192.168.156.1.4 &......1.5)
gateway 192.168.1.3 same DNS that above

I can not ping any ...........1.1 , .......1.2, 1.3 from windows pc
but they see each other
ping 192.168.1.4 is possibe on 192.168.1.5 and vice versa....

I guess the router is making trouble but I have no idea how to tell it
to give me peace....:-((
in other word linux does not see windows and vice versa
they are fighting and me I am on the middle if I can say

?s there anything to setup in the zyxel wizard ?
about Wan/Lan or other for instance ?

Moreover Samba doesnt work as well, I guess
this is the same problem ? again the router ?

many thanks in advance

Cheers
Jean-Luc

Hmmm, from what I understand you have two WinXP connected (I guess) to a hub/switch that's connected to eth1 of the MDK PC.
Now the problem seems to be that the XP's can't talk to MDK.

It can be a cable problem (the cable between the hub/switch and eth1 is broken) or it might be something on the MDK PC
that won't accept ping.
Do a ' cat /proc/sys/net/ipv4/icmp_echo_ignore_all' and make sure it returns "0". If not do a
'echo 1 > cat /proc/sys/net/ipv4/icmp_echo_ignore_all' as root and try to ping again.

If that doesn't work try ' iptables -I INPUT 3 -i eth1 -p icmp --icmp-type 8 -j ACCEPT' as root and ping again. This rule allows
incoming pings on eth1 to be accepted.

If this makes ping work but you still can't ping 212.43.244.30 check that 'cat /proc/sys/net/ipv4/ip_forward' returns "1"
If not 'echo 1 > /proc/sys/net/ipv4/ip_forward' as root.

If neither works and the cable's OK then please post the result of 'iptables-save'

- Peder

Dear Peder,



Hmmm, from what I understand you have two WinXP connected (I guess) to a hub/switch that's connected to eth1 of the MDK PC.
Now the problem seems to be that the XP's can't talk to MDK.

>>yes I am using a hub/switch but it s work because I can connect to WEb if I use directly the router instead of passing by eth1


It can be a cable problem (the cable between the hub/switch and eth1 is broken) or it might be something on the MDK PC
that won't accept ping.
Do a ' cat /proc/sys/net/ipv4/icmp_echo_ignore_all' and make sure it returns "0". If not do a
'echo 1 > cat /proc/sys/net/ipv4/icmp_echo_ignore_all' as root and try to ping again.

>>Ok that works well answer "0"


If that doesn't work try ' iptables -I INPUT 3 -i eth1 -p icmp --icmp-type 8 -j ACCEPT' as root and ping again. This rule allows
incoming pings on eth1 to be accepted.

>>here I have a problem the shell answer " iptables index of insertion too big"


If this makes ping work but you still can't ping 212.43.244.30 check that 'cat /proc/sys/net/ipv4/ip_forward' returns "1"
If not 'echo 1 > /proc/sys/net/ipv4/ip_forward' as root.

>>>this is Ok answer "1"




If neither works and the cable's OK then please post the result of 'iptables-save'


ip.txt result from "iptables-save"
iptables-save

# Generated by iptables-save v1.2.9 on Fri Feb 11 12:26:07 2005
*filter
:INPUT ACCEPT [223:18416]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [210:16505]
COMMIT
# Completed on Fri Feb 11 12:26:07 2


thanks


Jean-Luc





- Peder

The "iptables index of insertion too big" error is because you don't have any previous rules and the "3" tells iptables to
insert the rule at line three. So that's no problem.

I think the problem might be your default gateway on eth1 and the choice of bridging the networks.
I think that makes MDK send the ping replies to eth0.

The easiest way is probably to try the following:
Change the ip of eth1 to 172.16.0.1 and remove the gateway for it.
Change the XP's ip to 172.16.0.2 & 3 and the gateway to 172.16.0.1
Run 'iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to-source 192.168.1.2' as root.

'route -n' should say:

- Peder

HOUAAAAAAAAAAAAAAAAAAAAAAAAA !!!!!!!!!!!!!!!!!!!!!!!!!!

Dear Peder
THAT WORKS !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! :-))))))))))))))))))))))))

I did what you said and I got this one:

Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
172.16.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
0.0.0.0 192.168.1.1 0.0.0.0 UG 0 0 0 eth0

then I runned the wizard "sharing connetion" and that work !!
I am connected via MDK form my PCs

Many Thanks ohhh yes many thanks

I guess I will install again MDK properly to prevent any mistake
because I did lot of things and I am affraid about what I did...
as I am newbie so

Many thanks again

regards

Jean-Luc

Great!