finally but one hitch with 2 nics

[broncosis]

ok I have installed it on my new machine
but I have 2 nics both of wich are dynamicly set
from 2 differnt networks

this is not a produtcion box but I would still like to know why I can not ping the second nic

 

[cvschleich]

make sure you have no firewall rules/policies preventing flow:

iptables -L -n -v

Make sure FORWARD policy is ALLOW.

Also, check ip_forward:

cat /proc/sys/net/ipv4/ip_forward

If it is 0, your box won't forward, if it's 1, you're set.

edit /etc/sysctl.conf look for these lines:

# Controls IP packet forwarding
net.ipv4.ip_forward = 0

switch it to 1 and type:

sysctl -p

to make your edits take effect.

HTH

 

[broncosis]

nope but thanks

that doesn't seem to have helped
could it have something to do with default routing

and only having one default route set which is for the other network

 

[cvschleich]

Could you give us an example of your network layout and where you are trying to ping to/from? Not real addresses, just examples. Include the addresses on the 2 nics and the output from 'ip route' (edited for privacy, of course).

 

[broncosis]

well I have my private network
and the public network

with a router between them and
I would also like to multi home my piaf
and have one nic on each
I have had it working before with TB
but I can't remember for the life of me what I had to do back then to get it to work

my current router setup is not very friendly for port mapping

other wise I would just leave it behind the firewall and be done with it but I typicaly give it it's own dns name on the net so that I have rather open access to it where ever I am
and ip address

 

[cvschleich]

I'd investigate whether or not you really need the piaf box exposed to the big bad world, as opposed to just parking it behind your router in your protected network. Having said that, if that's really what you want to do:

Router external address and piaf external address need to be in the same network, with the same default gateway, which will be a third machine on the outside of your protected network. You should have the inside addresses all consistent in the same network space. All the machines should be able to ping the piaf box without having to hit the router first.

Again, examine carefully if you really want to do it this way. Good luck!

 

[jroper]

Hi

Bear in mind that the default firewall rules issued with PiaF do not repond to pings.

Joe

 

[dobbs]

Log in under Webmin. Go to Networking/Network Configuration/Network Interfaces.

Make sure you see both interfaces and that both are set to DHCP and to activate at boot. You can also assign a static IP to your internal card once you have it working.

 

[broncosis]

all is well Jroper was bang on
the firewall is set by default to not reply to pings on eth0 but it will reply to them on eth1 hence my issuse was never really a issue at all

 

[wardmundy]

all is well Jroper was bang on
the firewall is set by default to not reply to pings on eth0 but it will reply to them on eth1 hence my issuse was never really a issue at all

Just the kind of issues we like to hear about.