My previously stated reply will prevent your system to returning to its previous state after a reboot.<br><br><div><span class="gmail_quote">On 6/18/06, <b class="gmail_sendername">Joshua Gimer</b> <<a href="mailto:jgimer@gmail.com">
jgimer@gmail.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div>IP routing should be turned off by default. You will also need to edit your /etc/sysctl.conf file so that the line that reads:
<br><br>net.ipv4.ip_forward=0 reads net.ipv4.ip_forward=1 <br><br>This will enable IP forwarding on all interfaces; if you want to enable it on just one interface then you will need to remove the previously stated line and add a line in /etc/sysctl.conf that reads:
<br><br>net.ipv4.conf.<interface>.forwarding=1 ## Replacing interface with the appropriate interface (ex. eth0).<br><br>I also want to remind you that enabling ip routing on any interface is a security risk, so be warned.
<br><br>Also look out for the response from my friend Eric Davis, he is explicitly looking into this just for you; so if you still have issues maybe he can provide some insight.<br><br> <div></div><div><span class="e" id="q_10be9d1a5e016f72_1">
<span class="gmail_quote">On 6/18/06,
<b class="gmail_sendername">Fabian Arrotin</b> <<a href="mailto:fabian.arrotin@arrfab.net" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">fabian.arrotin@arrfab.net</a>> wrote:</span></span></div>
<div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"></blockquote></div><div><span class="e" id="q_10be9d1a5e016f72_3">
Hummh, maybe the following question may seem silly, but have you enabled<br>ip routing on your CentOS box ?<br>What's the result of cat /proc/sys/net/ipv4/ip_forward ?<br>If you have enabled ip routing , maybe have a look at your firewall
<br>rules to be sure that you don't drop any packets ...<br><br>On Sun, 2006-06-18 at 15:06 -0400, Michael B Allen wrote:<br>> I have two interfaces on a centos machine with IPs <a href="http://192.168.2.15" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
192.168.2.15
</a> and<br>> <a href="http://192.168.3.15" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">192.168.3.15</a>. The routing table is:<br>><br>> # route<br>> Kernel IP routing table<br>> Destination Gateway Genmask Flags Metric Ref Use Iface
<br>> <a href="http://192.168.3.0" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">192.168.3.0</a> * <a href="http://255.255.255.0" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
255.255.255.0</a> U 0 0 0 eth1<br>> <a href="http://192.168.2.0" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">192.168.2.0</a> *
<a href="http://255.255.255.0" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">255.255.255.0</a> U 0 0 0 eth0<br>> <a href="http://169.254.0.0" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
169.254.0.0</a> * <a href="http://255.255.0.0" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">255.255.0.0</a> U 0 0 0 eth1
<br>> default <a href="http://192.168.2.1" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">192.168.2.1</a> <a href="http://0.0.0.0" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
0.0.0.0</a> UG 0 0 0 eth0<br>><br>> The gateway <a href="http://192.168.2.1" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">192.168.2.1</a> is a wireless router on which I have a static
<br>> route for <a href="http://192.168.3.0/24" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">192.168.3.0/24</a> to <a href="http://192.168.2.15" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
192.168.2.15</a>.<br>><br>> The problem is I cannot communicate between these networks. If I ping<br>> from a machine on
<a href="http://192.168.2.0" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">192.168.2.0</a> to a machine on <a href="http://192.168.3.0" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
192.168.3.0</a> it never makes<br>> it. If I run tcpdump -i eth0 on the machine with two nics, I can see the<br>> ICMP packets coming in so I know the static route on the wireless router
<br>> is working. If I run tcpdump -i eth1 I cannot see the ICMP packets. So the<br>> routing is wrong. I can successfully ping the machine on the <a href="http://192.168.3.0" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
192.168.3.0</a><br>> network from the machine with two interfaces.
<br>><br>> I would think that a packet sent from <a href="http://192.168.2.100" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">192.168.2.100</a> for <a href="http://192.168.3.128" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
192.168.3.128</a><br>> would go to the gateway, get sent to <a href="http://192.168.2.15" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
192.168.2.15</a> which it would go<br>> though the above listed routing table, match <a href="http://192.168.3.0" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">192.168.3.0</a> and get sent<br>
> to eth1. What am I doing wrong?<br>><br>> Mike<br>><br><br>
<br></span></div><div>-----BEGIN PGP SIGNATURE-----<br>Version: GnuPG v1.4.3 (GNU/Linux)<br><br>iD8DBQBElaynnVkHo1a+xU4RAsomAJ9rk3Sv0llEQA3nOH4W0E8Z4JuxBACcD2Wb<br>M4CTUmS5yAmfik1STh7PZu4=<br>=NdNn<br>-----END PGP SIGNATURE-----
</div><div><span class="q"><br><br><br>
_______________________________________________<br>CentOS mailing list<br><a href="mailto:CentOS@centos.org" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">CentOS@centos.org</a><br><a href="http://lists.centos.org/mailman/listinfo/centos" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
http://lists.centos.org/mailman/listinfo/centos
</a><br><br><br></span></div><div></div><br><br clear="all"><br>-- <br>Thx<br></div><div><span class="sg">Joshua Gimer
</span></div></blockquote></div><br><br clear="all"><br>-- <br>Thx<br>Joshua Gimer