[ag-automation] Antwort: Re: Antwort: Re: network problem with 2.6.21.6-rt21

[M.Voss at wzl.rwth-aachen.de]

Hans-Peter Bock <Hans-Peter.Bock at isw.uni-stuttgart.de> schrieb am 
26.11.2007 14:04:14:

> Hello Markus,
> 
> > attached you'll find the files with the output of the requested 
commands.
> 
> > Kernel IP Routentabelle
> > Ziel            Router          Genmask         Flags Metric Ref  Use 
Iface
> > 134.130.224.0   0.0.0.0         255.255.240.0   U     0      0       0 
eth0
> > 169.254.0.0     0.0.0.0         255.255.0.0     U     0      0       0 
eth0
> > 127.0.0.0       0.0.0.0         255.0.0.0       U     0      0 0 lo
> > 0.0.0.0         134.130.239.254 0.0.0.0         UG    0      0       0 
eth0
> 
> > eth0      Protokoll:Ethernet  Hardware Adresse 00:1A:92:34:D6:67 
> >           inet Adresse:134.130.233.61  Bcast:134.130.239.255 
> Maske:255.255.240.0
> >           inet6 Adresse: fe80::21a:92ff:fe34:d667/64 GÃ?
> ltigkeitsbereich:Verbindung
> >           UP BROADCAST NOTRAILERS RUNNING MULTICAST  MTU:1500 Metric:1
> >           RX packets:2053 errors:0 dropped:0 overruns:0 frame:0
> >           TX packets:39 errors:0 dropped:0 overruns:0 carrier:0
> >           collisions:0 SendewarteschlangenlÃ?nge:1000 
> >           RX bytes:199892 (195.2 Kb)  TX bytes:197541274 (188.3 Mb)
> >           Interrupt:16 Basisadresse:0x2000 
> 
> this seems to be ok.
> 
> 
> > SFW2-OUT-ERROR IN= OUT=eth0 SRC=134.130.233.61 DST=137.226.34.227 
> LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=13946 DF PROTO=TCP SPT=2036 
> DPT=21 WINDOW=5840 RES=0x00 SYN URGP=0 OPT 
> (020405B40402080AFFFC97A80000000001030307) 
> > SFW2-OUT-ERROR IN= OUT=eth0 SRC=134.130.233.61 DST=134.130.4.1 
> LEN=54 TOS=0x00 PREC=0x00 TTL=64 ID=14518 DF PROTO=UDP SPT=1024 DPT=53 
LEN=34 
> > SFW2-INext-DROP-DEFLT IN=eth0 OUT= MAC=00:1a:92:34:d6:67:00:01:f4:
> 3e:a5:38:08:00 SRC=134.130.4.1 DST=134.130.233.61 LEN=199 TOS=0x00 
> PREC=0x00 TTL=250 ID=50537 DF PROTO=UDP SPT=53 DPT=1024 LEN=179 
> 
> It seems as if you have a (broken) firewall installed on this 
> machine. Can you deactivate this firewall to test, if your network 
> setup works then?

Ok, thanks. That's it. I deactivated it and now the network is working. 
The "SuSEfirewall2" in that versions seems to dislike the new kernel 
version. 

When I try to restart it I get the following messages:

wm-vos-dedicos:/home/vos # SuSEfirewall2 start
SuSEfirewall2: Warning: ip6tables does not support state matching. 
Extended IPv6 support disabled.
SuSEfirewall2: Setting up rules from /etc/sysconfig/SuSEfirewall2 ...
FATAL: Module ip_conntrack not found.
SuSEfirewall2: batch committing...
iptables-batch v1.3.6: can't initialize iptables table `nat': Table does 
not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
SuSEfirewall2: Error: iptables-batch failed, re-running using iptables
iptables v1.3.6: can't initialize iptables table `nat': Table does not 
exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.3.6: can't initialize iptables table `nat': Table does not 
exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
SuSEfirewall2: Firewall rules successfully set

> BTW: Is your nameserver configured correctly in /etc/resolv.conf?

yes.


Thank you!

Markus

--------------------------------------------------------------------- 
Dipl.-Inform. Markus Voss

Werkzeugmaschinenlabor - RWTH Aachen 
Lehrstuhl fuer Werkzeugmaschinen 
Steinbachstr. 53 B
D-52074 Aachen 

Tel:  ++49 241 80 28235
Fax: ++49 241 80 22293 

M.Voss at wzl.rwth-aachen.de
http://www.wzl.rwth-aachen.de 
--------------------------------------------------------------------