Pista si koupil kartu, tak jsem zacal pripojovat sveho prvniho klienta. Potreboval jsem vyzkouset svoje jinak ciste akademicke uvahy ohledne routovani. Problem byl, ze to nefungovlo. V prubehu vecera jsme routovani oskali na tu uplne nejzakladnejsi tabulku a stejne ni.<\/p>\n
Dnes mi to nedalo a pustil jsem se znovu do hledani priciny. Z vnitrniho kompu jsem pustil ping na bluehillz a poucil jsem se z man tcpdump jak to mam udelat aby mi ukazoval komunikaci mimo ssh relace (ono kdyz tcpdump do te ssh relace neco vypisuje a zaroven monitoruje ten interface, tak to nejak nejde stihat).<\/p>\n
# tcpdump -i eth0 not port 22<\/p>\n
Pokud byste potrebovali primo a jen icmp pakety tak jednoduse<\/p>\n
# tcpdump -i eth0 icmp<\/p>\n
Zjistil jsem ze pakety v poradku prichazeji na interface, ale dal se nic nedeje. Prvni co me napadlo ze se zahazuji nekde v iptables, ale:<\/p>\n
naxrouter:~# iptables -L -t filter
\nChain INPUT (policy ACCEPT)
\ntarget prot opt source destination <\/p>\n
Chain FORWARD (policy ACCEPT)
\ntarget prot opt source destination <\/p>\n
Chain OUTPUT (policy ACCEPT)
\ntarget prot opt source destination
\nnaxrouter:~# iptables -L -t nat
\nChain PREROUTING (policy ACCEPT)
\ntarget prot opt source destination <\/p>\n
Chain POSTROUTING (policy ACCEPT)
\ntarget prot opt source destination <\/p>\n
Chain OUTPUT (policy ACCEPT)
\ntarget prot opt source destination
\nnaxrouter:~# iptables -L -t mangle
\nChain PREROUTING (policy ACCEPT)
\ntarget prot opt source destination <\/p>\n
Chain INPUT (policy ACCEPT)
\ntarget prot opt source destination <\/p>\n
Chain FORWARD (policy ACCEPT)
\ntarget prot opt source destination <\/p>\n
Chain OUTPUT (policy ACCEPT)
\ntarget prot opt source destination <\/p>\n
Chain POSTROUTING (policy ACCEPT)
\ntarget prot opt source destination <\/p>\n
Takze tdy evidentne problem nebyl. No a po dalsich nekolika hodinach me to napadlo<\/p>\n
naxrouter:~# cat \/proc\/sys\/net\/ipv4\/conf\/all\/forwarding
\n0<\/p>\n
NO JASNE!!! Sakra to jsem vuuul. Hlavne ze me na to jeste LOC upozornoval! Pravda uz to bude tak mesic, ale napadnout me to driv mohlo. Ted uz nebyl problem dat bude<\/p>\n
echo 1 > \/proc\/sys\/net\/ipv4\/conf\/all\/forwarding<\/p>\n
a nebo zmenit prislusnou volbu v<\/p>\n
naxrouter:~# cat \/etc\/network\/options
\nip_forward=yes
\nspoofprotect=yes
\nsyncookies=no<\/p>\n
Tak a ted uz se budu muset pustit do toho OSPF. To aby jina AP vedela jake tady mam site a posilaly jim packety zpatky.<\/p>\n","protected":false},"excerpt":{"rendered":"
Pista si koupil kartu, tak jsem zacal pripojovat sveho prvniho klienta. Potreboval jsem vyzkouset svoje jinak ciste akademicke uvahy ohledne routovani. Problem byl, ze to nefungovlo. V prubehu vecera jsme routovani oskali na tu uplne nejzakladnejsi tabulku a stejne ni. Dnes mi to nedalo a pustil jsem se znovu do hledani priciny. Z vnitrniho kompu […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-27","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/nax.cz\/index.php?rest_route=\/wp\/v2\/posts\/27","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nax.cz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nax.cz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nax.cz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nax.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=27"}],"version-history":[{"count":0,"href":"https:\/\/nax.cz\/index.php?rest_route=\/wp\/v2\/posts\/27\/revisions"}],"wp:attachment":[{"href":"https:\/\/nax.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=27"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nax.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=27"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nax.cz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=27"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}