Very Computer

by **error_15** » Sun, 08 Sep 2002 21:21:12

Quote:> Can anyone tell me why this is happening... I have a machine with 4
> nics (1 global, 3 local) . each of the local nics has a private ip
> range 192.168.64.x, 192.168.32.x 192.168.10.x (and a subnet mask of
> 255.255.255.0) . I have NAT setup and all segments can get on the net.

> HOWEVER for some reason I can ping from a machine on the say
> 192.168.64.x network to one on the 192.168.32.x ? whysat ?

> Could it be my line in my rc.firewall to this effect:

> echo 1 > /proc/sys/net/ipv4/ip_forward

yes

Quote:> Also without that will NAT still work ?

no

> ????

SeeYa

error

by **Nibb** » Sun, 08 Sep 2002 21:18:02

Can anyone tell me why this is happening... I have a machine with 4
nics (1 global, 3 local) . each of the local nics has a private ip
range 192.168.64.x, 192.168.32.x 192.168.10.x (and a subnet mask of
255.255.255.0) . I have NAT setup and all segments can get on the net.

HOWEVER for some reason I can ping from a machine on the say
192.168.64.x network to one on the 192.168.32.x ? whysat ?

Could it be my line in my rc.firewall to this effect:

echo 1 > /proc/sys/net/ipv4/ip_forward

Also without that will NAT still work ?

????

by **Nibb** » Sun, 08 Sep 2002 22:18:57

K, so that solves that . However what are some rules that I could put
in to prevent subnet->subnet communications ? Has anyone here
ever set up samba on multiple nics (??? multiple copies of samba??? )
Even when I bind samba to a specific interface I still get nmbd seeing
all the different networks because I think its forwarding the
broadcasts. Anyone out there have luck with samba managing
3 seperate workgroups and keeping them essentially isolated from each
other??

>> Can anyone tell me why this is happening... I have a machine with 4
>> nics (1 global, 3 local) . each of the local nics has a private ip
>> range 192.168.64.x, 192.168.32.x 192.168.10.x (and a subnet mask of
>> 255.255.255.0) . I have NAT setup and all segments can get on the net.

>> HOWEVER for some reason I can ping from a machine on the say
>> 192.168.64.x network to one on the 192.168.32.x ? whysat ?

>> Could it be my line in my rc.firewall to this effect:

>> echo 1 > /proc/sys/net/ipv4/ip_forward

>yes

>> Also without that will NAT still work ?

>no

>> ????

by **Germann Arlingto** » Mon, 09 Sep 2002 23:33:21

On Saturday 07 Sep 2002 13:18 in comp.os.linux.networking group someone

> K, so that solves that . However what are some rules that I could put
> in to prevent subnet->subnet communications ? Has anyone here
> ever set up samba on multiple nics (??? multiple copies of samba??? )
> Even when I bind samba to a specific interface I still get nmbd seeing
> all the different networks because I think its forwarding the
> broadcasts. Anyone out there have luck with samba managing
> 3 seperate workgroups and keeping them essentially isolated from each
> other??

>>> Can anyone tell me why this is happening... I have a machine with 4
>>> nics (1 global, 3 local) . each of the local nics has a private ip
>>> range 192.168.64.x, 192.168.32.x 192.168.10.x (and a subnet mask of
>>> 255.255.255.0) . I have NAT setup and all segments can get on the net.

>>> HOWEVER for some reason I can ping from a machine on the say
>>> 192.168.64.x network to one on the 192.168.32.x ? whysat ?

>>> Could it be my line in my rc.firewall to this effect:

>>> echo 1 > /proc/sys/net/ipv4/ip_forward

>>yes

>>> Also without that will NAT still work ?

>>no

>>> ????

You will have to play with firewall forwarding rules to block forwarding
between the subnets.
--
G.Arlington
== The more you know, then better you realise how little you really know.

by **Simo** » Tue, 10 Sep 2002 05:30:42

> K, so that solves that . However what are some rules that I could put
> in to prevent subnet->subnet communications ?

iptables -A FORWARD -s 192.168.10.0/24 -d 192.168.32.0/24 -j DROP
iptables -A FORWARD -s 192.168.10.0/24 -d 192.168.64.0/24 -j DROP
etc (similar for the other subnets, but those should start you off).

Quote:> Has anyone here ever set up samba on multiple nics

Not me.

--

"We demand rigidly defined areas of doubt and uncertainty."
- Douglas Adams

Very Computer

Networking (4 nics - 3local) Issues

Networking (4 nics - 3local) Issues

Networking (4 nics - 3local) Issues

Networking (4 nics - 3local) Issues

Networking (4 nics - 3local) Issues

Networking (4 nics - 3local) Issues