Hi!
I'm in serious trouble right now.
I built a firewall with the 2.2.x kernel (with ipchains + masquerading
+ ipip tunnel).
If I try to connect to my firewall from another computer(inner or outer
net) , sometimes (50%, what else??) the 'wrong' interface answers (my
firewall detects packets for the ethX on ethY). Now, there comes the
strange thing: When I connect from the firewall to any other computer
(inner or outer net), there's the same behaviour.
This happens only if the connections are 'expired', if there's no
connection to or from firewall shown in arp tables anymore.
When I set the arp tables on the other machines by hand, there's no
problem at all, but I can't do it, too many computers.
I think it has something to do with the fact, that the 2 logical nets
(inner and outer) are not divided physical(the packets are traversed
through the same switches), and the NIC'S in the firewall are identical.
(Intel EEPRO100 (with GD82559 chip), formerly SMC Etherpower 100(with
83c170 chip), but same behaviour with these)
My kernel versions are 2.2.16 on the one firewall and 2.2.17 on the
other (the tunnel is between these two)
Thanx in advance,
Peter Zimmer
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/
This archive was generated by hypermail 2b29 : Mon Oct 23 2000 - 21:00:10 EST