[ag-automation] Antwort: Re: network problem with 2.6.21.6-rt21

[Hans-Peter Bock]

Hello Markus,

> attached you'll find the files with the output of the requested commands.

> Kernel IP Routentabelle
> Ziel            Router          Genmask         Flags Metric Ref    Use Iface
> 134.130.224.0   0.0.0.0         255.255.240.0   U     0      0        0 eth0
> 169.254.0.0     0.0.0.0         255.255.0.0     U     0      0        0 eth0
> 127.0.0.0       0.0.0.0         255.0.0.0       U     0      0        0 lo
> 0.0.0.0         134.130.239.254 0.0.0.0         UG    0      0        0 eth0

> eth0      Protokoll:Ethernet  Hardware Adresse 00:1A:92:34:D6:67  
>           inet Adresse:134.130.233.61  Bcast:134.130.239.255  Maske:255.255.240.0
>           inet6 Adresse: fe80::21a:92ff:fe34:d667/64 GÃ?ltigkeitsbereich:Verbindung
>           UP BROADCAST NOTRAILERS RUNNING MULTICAST  MTU:1500  Metric:1
>           RX packets:2053 errors:0 dropped:0 overruns:0 frame:0
>           TX packets:39 errors:0 dropped:0 overruns:0 carrier:0
>           collisions:0 SendewarteschlangenlÃ?nge:1000 
>           RX bytes:199892 (195.2 Kb)  TX bytes:197541274 (188.3 Mb)
>           Interrupt:16 Basisadresse:0x2000 

this seems to be ok.


> SFW2-OUT-ERROR IN= OUT=eth0 SRC=134.130.233.61 DST=137.226.34.227 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=13946 DF PROTO=TCP SPT=2036 DPT=21 WINDOW=5840 RES=0x00 SYN URGP=0 OPT (020405B40402080AFFFC97A80000000001030307) 
> SFW2-OUT-ERROR IN= OUT=eth0 SRC=134.130.233.61 DST=134.130.4.1 LEN=54 TOS=0x00 PREC=0x00 TTL=64 ID=14518 DF PROTO=UDP SPT=1024 DPT=53 LEN=34 
> SFW2-INext-DROP-DEFLT IN=eth0 OUT= MAC=00:1a:92:34:d6:67:00:01:f4:3e:a5:38:08:00 SRC=134.130.4.1 DST=134.130.233.61 LEN=199 TOS=0x00 PREC=0x00 TTL=250 ID=50537 DF PROTO=UDP SPT=53 DPT=1024 LEN=179 

It seems as if you have a (broken) firewall installed on this machine. Can you deactivate this firewall to test, if your network setup works then?

To deactivate the firewall in a quick and dirty way, use this commands:

$ iptables -X
$ iptables -P INPUT ACCEPT
$ iptables -P OUTPUT ACCEPT

BTW: Is your nameserver configured correctly in /etc/resolv.conf?


Best regards, Hans-Peter
-- 
(°< Hans-Peter Bock, Dipl.-Ing., http://www.isw.uni-stuttgart.de/ >°)
(/) ISW - Universität Stuttgart, Seidenstraße 36, 70174 Stuttgart (\)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 481 bytes
Desc: Digital signature
Url : http://lists.osadl.org/pipermail/ag-automation/attachments/20071126/6da0b2be/attachment.bin