Networking :: Incomplete Route Table: Centos5.5 / 64 On ESX
Feb 10, 2010
Going haywire on a new Centos 5.4 64bit install on vmware esx 4. I should know, but my mind is obviously fucked up today. I get the "distination unreachable", indicating something ICMP related, checked network setup, all looks like usual. Except my routing table lacks the 127.0.0.0 and 0.0.0.0 def. gw entries, as in this working box example:
192.168.9.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
0.0.0.0 192.168.9.1 0.0.0.0 UG 0 0 0 eth0
FWIW, during install, did the usual basic firewall steps, not'n extra added but SSH. Tried with/without iptables, no change; no wonder given the lacky routing table. Sure, I can add what's missing, but I'd like to know why it's missing; i.e. what I missed on basic setup, as I'm going to repeat this with a nof Centos/RHEL installations (replacing SLES).
New Centos 5.4 64bit install on vmware esx 4, NAT net setup. I can ping/trace other servers on IP, do nslookup's on name..Ping(traceroute on name gets me "distination unreachable", indicating an ICMP issue, so I checked the network setup, all looks like usual.Well, except that my routing table lacks the 127.0.0.0 and 0.0.0.0 def. gw entries, as in this working box example:
192.168.9.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo 0.0.0.0 192.168.9.1 0.0.0.0 UG 0 0 0 eth0
FWIW, during install, I did the usual basic firewall steps,including SSH.Tried with/without iptables, no change; no wonder given the lacky routing table. Sure, I can add what's missing to the routing table, but I'd like to know why it's missing; i.e. what I missed on basic setup, as I'm going to repeat this with a nof new installations (replacing SLES).
I got this definition:"a process that replaces a series of related, specific routes in a route table with a more generic route." honestly I found it not so clear.. I want to know if this definition is correct and also more details about this subject..
I use a secure connection to reach company network from outside. There's a client application "Juniper network", which creates the secured tunnel to a company network. However, the connection never survives more than 8 seconds, when it goes disconnected with the message "Route monitor alarm". From my recent search for a solution I've found that this error is caused by a change in a route table, which violates a connection policy.
"This disconnect is typically triggered by a change in the routing table of the client machine, the change is such that the split tunnel policies defined by the administrator will be violated" - from [URL]
This is how a routing table looks before, during and after the connection attempt:
There are two connections in my Ubuntu server: eth0 is a normal interface and, eth1 is configured with an static IP, and has an domain name with that IP. But this connection is charged by bytes, very expensive.
how to set up the route table so that: everyone can access my server with the domain name, and let the traffic goes from eth0 as much as possible(I have a proxy service on my server. At least, let the proxy traffic goes from eth0)?
br0 - 192.168.0.1 - Internet eth2 - 192.168.1.1 - LAN tun0 - 10.0.0.2 - VPN (via br0)
What I'd like to do is to route all TCP packets coming from eth2 to tun0 where a VPN client is running on 10.0.0.2. If I delete all default routes and if I add a new route to tun0 like :
Code:
route del default route add default gw 10.0.0.2
Everything is fine, and everyone on eth2 can reach the Internet using the VPN access. Now the problem is that my VPN client does not allow any other protocols other than TCP. And I also want to allow VPN access only to eth2, no other LAN nor the router itself. use iptables to filter any TCP packets and mark them, so they can be sent to tun0, while any other packets can reach the Internet via br0 (192.168.0.1). I found on the Internet that we can mark packets before they get routed. Using the following commands :
Code:
iptables -t mangle -A PREROUTING -j MARK --set-mark 85 -i eth2 -p tcp --dport 80 ip route add table 300 default via 10.0.0.2 dev tun0 ip rule add fwmark 0x55 table 300
First of all, --dport 80 never work... :/ I wanted to filter TCP 80 packets coming from eth2, but none of them seems to be HTTP packets... oO (very strange...). Nevermind, I decided to forget about the --dport option. I use the "iptables -L -v -t mangle" command to see how many packets are marked, and it is working fine, all TCP packets coming from eth2 are marked. Now the problem is that none of them are routed to tun0 they are all respecting the "route -n" rules... and not the "table 300" rule I have created.
Having trouble getting my Netgear WNA1000 working thru wireless router. Have tried lots of suggestions from other threads to no avail. Someone suggested that th routing table isn't set correctly, so have been trying to use the follwing to make the proper entry in the routing table: sudo route add -net 192.168.0.1 netmask 255.255.255.0 dev wlan0
Result: error message stating with: "route: netmask does not match route address"
followed by "Usage" instructions which tell me to do what I just did. Any ideas on how I can populate my routing table with correct entry for my wireless card? Not to complicate matters, but I temporarily turned off encryption on my router to eliminate that as a possibility until I get connected. So maybe it'still trying to connect via encrypted mode - do I need to turn off encryption on my (client) end?
I have setup FTP Server on my Windows machine with Filezilla server. Now, if I try to copy files from it using Ubuntu 10.04, Lucid, it downloads incomplete files if I don't switch to binary mode.
Is there some config issue from Ubuntu client or something needs to be changed from Windows Client.
We purchased a virtual server from GoDaddy (1 month trial) to set up as a proxy for our networks (24 of them). I am having 2 separate issues. The first is I can't configure/install NAT and support is telling me the only way I can is to purchase a dedicated server. Here's the error:
iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 3128 iptables v1.3.5: can't initialize iptables table `nat': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded. Here's the fix: [URL] So, what I am hoping to do is configure this by just opening port 3128 directly, and only allowing access from our networks. As a test I did this and allowed only from our office and it did not work. However I can't connect, so I am wondering what I am doing wrong? Here's my squid configuration:
I m using an adsl modem router for connecting into the internet while my operating system is windows 7,but i want to learn open source platforms like UNIX and Linux. so for this reason i install a Linux distro which is centos5. i want to ask how i can configure my modem router with centos. modem router model is Billion BIPAC 5210s.i search internet for its drivers and the only thing which i found modem driver for windows platforms and nothing esle want to know that for installing this modem with my centos i need to download its drivers or not and if the answer is yes or no how comes !
do not know how to install the driver RT25USB-SRC-V2.0.8.0.tar.gz for my Wireless USB, please someone have a howto, since I used the howto Centos4 in and had problems, did not conclude,
eth1 (13.3.3.2) is connected to router port 2/0 (13.3.3.1). I am trying to ping from eth1 to router or vice versa. None of them is not working. Don't know what is problem. [root@perseus anvltest]# ping 13.3.3.1 PING 13.3.3.1 (13.3.3.1) 56(84) bytes of data.
3 packets transmitted, 0 received, 100% packet loss, time 2000ms
I had installed a Centos 5 server, with one network interface card and work find. Now I want to install ADSL (PPPOE) dial-up for internet in this server, so need to add a 2nd network interface card (RTL8139D or other) . After plug the network card, what I need to do in Centos to find this new card and config it?
i need to prepare a presentation for that i have to copy a table from [URL] to my power point slide. but when i am copying it i am just getting a table with single column. is there a method to import the contents from web page table to my presentation table?
Kmail 1.13.2 Problem on startup, error is from nepomuk, data storage. "cannot find Redland backend, nepomuk is disabled until fixed. Also see the following error from the akonadi console:
100503 10:00:15 [Note] Plugin 'ndbcluster' is disabled. 100503 10:00:15 InnoDB: Started; log sequence number 0 31413862 100503 10:00:15 [Warning] Can't open and lock time zone table: Table 'mysql.time_zone_leap_second' doesn't exist trying to live without
I have a server in the office and when I need to connect via cable I have to start up a root terminal and type in:
route add -net 0.0.0.0 gw 10.0.1.10 dev eth0
Is there a way to have this saved so I don't have to re-type it every time ? I already tried adding the command in /etc/rc.local and also in /etc/network/interfaces but it doesn't.
I've succesfullly connected to my vpn with kvpnc, but none of my traffic is going through the vpn! I dont know how to route traffic to the vpn. for instance, when I go to whatsmyip.com it still has my previous ip.
Code: route add -net 192.168.98.0 netmask 255.255.255.0 gw 192.168.99.1 -net 192.168.98.0 , is it for ip address of the client/host? man route says , "target is a network".What does it mean?
I'm using Fedora 9 and has finished the DHCP for my eth2 and static on eth0. I would like to add a route so that the 192.168.22.x eth0 and 192.168.26.x eth2 can communicate to each others,.
How can I add this to Ubuntu so that I can effectively use both networks connected to my machine. All I do in WinXP is run this from the command prompt: route -p add 10.0.0.0 mask 255.0.0.0 10.15.122.9
I have 3 computers on a local home network. Computer 1 is not receiving incoming anything from other computers on the network, and I don't know why. The regular internet works fine.
Computer 1 can ping and ssh into either 2 or 3. 2 can ping and ssh into 3 and vice versa. But nothing can ping OR ssh into 1. Trying to do so says "no route to host".
I have two NIC's interfaces on my linux machine(eth1 and eth2). Each have different IP addresses(10.0.0.1, 10.67.7.1). These two interfaces are connected together through hub. Here is the my question?
1) If I 'ping 10.0.0.1', it should go out through network interface eth2 and through hub and enter on eth1 and response also travel through similar direction.
2) If I 'ping 10.67.7.1', it should go out through network interface eth1 and through hub and enter on eth2.
How can setup routing table for this,I have tried setting up routing and iptables, etc.. nothing helped.
If any one good router/networking guy, you should know this one.I am doing a project, I want this way to handle this.
I have some CISCO,Linux related problem with 2 Class C subnets:
192.168.64.0 -> PC5 192.168.65.0 -> PC6
Here's a picture of my situation: [URL]
HQ has to have 2 STATIC routes in order those 2 "PCs" mentioned above to have end to end connectivity with NETWORK A and NETWORK B. Now I try with
route0 -> network: 0.0.0.0, mask: 0.0.0.0, nexthop: Serial 0/0/0 route1 -> network: 0.0.0.0, mask: 0.0.0.0, nexthop: Serial 0/0/1
And it seems to work but I don't think it's proper! I feel it's kinda wrong ... but all my other attempts to set another couple of static routes ends in "Request timed out" and thus connection lost.
I'm trying to troubleshoot some networking issues I'm having between my Linux servers connecting to a server at another location after a Cisco ASA firewall has been installed at my location. I can make the connection work if I lower the mtu on the NIC (ifconfig eth0 mth 1000) - however that supposedly can break the local network if I don't set everything else's mtu to match. Supposedly I can use the iproute package (debian etch) to lower the mtu on a per-route basis, but it doesn't seem to work for me.
Code: ip route delete default ip route add default via X.X.X.X mtu 1000
I have a server that I can ping, and I can connect remotely with ssh to it. But when I try to connect to apache (port 80) I get "no route to host". But I can connect to localhost It's not just my client system that is having this problem but also systems that are on the same subnet There is no firewall running on the server route on the server
