ciao a tutti e buon ferragosto
purtroppo per me le cose continuano a non fungere...
spulciando sugli altri topic del forum
http://www.slacky.it/modules.php?name=F ... 92+168+100
ho rintracciato un problema simile al mio,
ma non riesco ugualmente a navigare con gli altri pc della rete
se provo a dare l'indirizzo 192.168.100.1 alla scheda eth0 non navigo più!
La topologia della mia rete è la seguente:
WWW (ppp0)----->INTERFACCIA RETE ESTERNA(eth0)---->INTERFACCIA RETE INTERNA (ra0)------>RETE INTERNA (192.168.10.X,192.168.10.Y....)
ora questa è la mia configurazione corrente:
ifconfig:
eth0 Link encap:Ethernet HWaddr 00:40:F4:79:91:3E
inet addr:192.168.1.22 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::240:f4ff:fe79:913e/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:4185 errors:0 dropped:0 overruns:0 frame:0
TX packets:3725 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:3390314 (3.2 Mb) TX bytes:560873 (547.7 Kb)
Interrupt:9
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:129 errors:0 dropped:0 overruns:0 frame:0
TX packets:129 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:13632 (13.3 Kb) TX bytes:13632 (13.3 Kb)
ppp0 Link encap:Point-to-Point Protocol
inet addr:82.59.57.158 P-t-P:192.168.100.1 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1492 Metric:1
RX packets:4079 errors:0 dropped:0 overruns:0 frame:0
TX packets:3569 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:3
RX bytes:3293882 (3.1 Mb) TX bytes:470706 (459.6 Kb)
ra0 Link encap:Ethernet HWaddr 00:0C:F6:0F:AC:58
inet addr:192.168.10.22 Bcast:192.168.10.255 Mask:255.255.255.0
inet6 addr: fe80::20c:f6ff:fe0f:ac58/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:19 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 b) TX bytes:1128 (1.1 Kb)
Interrupt:5
route:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.100.1 * 255.255.255.255 UH 0 0 0 ppp0
localnet * 255.255.255.0 U 0 0 0 eth0
192.168.10.0 * 255.255.255.0 U 0 0 0 ra0
loopback * 255.0.0.0 U 0 0 0 lo
default 192.168.100.1 0.0.0.0 UG 0 0 0 ppp0
route -n :
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.100.1 0.0.0.0 255.255.255.255 UH 0 0 0 ppp0
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
192.168.10.0 0.0.0.0 255.255.255.0 U 0 0 0 ra0
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
0.0.0.0 192.168.100.1 0.0.0.0 UG 0 0 0 ppp0
traceroute:
traceroute: Warning:
http://www.google.it has multiple addresses; using 216.239.59.104
traceroute to
http://www.l.google.com (216.239.59.104), 30 hops max, 38 byte packets
1 192.168.100.1 (192.168.100.1) 33.643 ms 10.708 ms 13.078 ms
2 217.141.251.142 (217.141.251.142) 28.053 ms 9.861 ms 10.228 ms
3 host61-8.pool8536.interbusiness.it (85.36.8.61) 34.517 ms 22.001 ms 22.345 ms
4 r-rm180-vl4.opb.interbusiness.it (151.99.29.214) 28.427 ms 18.999 ms 29.175 ms
5 rom4-ibs-executive-5-it.rom.seabone.net (213.144.177.185) 32.933 ms 23.625 ms 19.816 ms
6 amsix-ams2-racc1.ams.seabone.net (195.22.213.221) 58.686 ms 58.800 ms 59.706 ms
7 core1.ams.net.google.com (195.69.144.247) 56.658 ms 53.612 ms 53.215 ms
8 64.233.175.246 (64.233.175.246) 59.638 ms 66.249.94.223 (66.249.94.223) 70.740 ms 70.575 ms
9 216.239.48.49 (216.239.48.49) 71.357 ms 69.522 ms 216.239.46.173 (216.239.46.173) 58.758 ms
10 216.239.49.254 (216.239.49.254) 70.201 ms 216.239.46.174 (216.239.46.174) 60.136 ms 216.239.49.253 (216.239.49.253) 70.179 ms
11 64.233.175.245 (64.233.175.245) 62.484 ms 216.239.49.254 (216.239.49.254) 112.437 ms 80.361 ms
12 64.233.175.245 (64.233.175.245) 76.232 ms 66.249.94.223 (66.249.94.223) 80.288 ms 216.239.59.104 (216.239.59.104) 67.452 ms
il problema è questo: i due pc in rete wireless pingano tranquillamente (l'altro è 192.168.10.11) ma non posso impostare il default gw perchè se do
route add default gw 192.168.100.1 netmask 255.255.255.0
mi da network is unrecheable, ma è lo stesso se gli do
route add default gw 192.168.1.22 netmask 255.255.255.0
e l'ip forwarding è attivato !!!!!!!!
vi posto gli script che sto provando ad usare adesso per condividere la connessione:
#! /bin/bash
INT_RETE_ESTERNA=eth0
INT_RETE_INTERNA=ra0
LANIN=192.168.10.0/24
################# SEZIONE GATEWAY #######################
echo 1 > /proc/sys/net/ipv4/ip_forward
iptables -t nat -A POSTROUTING -o $INT_RETE_ESTERNA -j MASQUERADE
dhcpcd $INT_RETE_ESTERNA
ifconfig $INT_RETE_INTERNA 192.168.10.22 netmask 255.255.255.0 up
################ SEZIONE FIREWALL FILTRANTE #############
echo 1 > /proc/sys/net/ipv4/tcp_syncookies #contro il syn flood
echo 1 > /proc/sys/net/ipv4/conf/all/rp_filter #contro Ip spoofing
iptables -F
iptables -P INPUT DROP
iptables -P OUTPUT ACCEPT
iptables -P FORWARD ACCEPT
#SEZIONE INPUT
iptables -A INPUT -s 127.0.0.1 -d 127.0.0.1 -i lo -j ACCEPT
iptables -A INPUT -i $INT_RETE_INTERNA -j ACCEPT
iptables -A INPUT -i $INT_RETE_ESTERNA -p all -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -p icmp -j ACCEPT
#SEZIONE FORWARD PER LA LAN
iptables -A FORWARD -s 0/0 -d $LANIN -p tcp --syn -j DROP
e per provare ad avere un ip assegnato in dhcp :
#! /bin/bash
################## ATTIVAZIONE MODULI WIRELESS ##########
modprobe -r rt2500 && modprobe -a rt2500
iwconfig ra0 essid casa
iwconfig ra0 mode ad-hoc
########################################################
######## ATTIVAZIONE MODULI CONDIVISIONE DI RETE #######
modprobe ip_tables
modprobe ip_conntrack
modprobe iptable_nat
modprobe ipt_MASQUERADE
#######################################################
IP= 192.168.100.1
INT_RETE_ESTERNA=eth0
INT_RETE_INTERNA=ra0
#IP_ACCETTA1=MACCHINA ESTERNA TRUSTED 1 #(Amici lontani)
#IP_ACCETTA2=MACCHINA ESTERNA TRUSTED 2 #(Amici lontani)
LANIN=192.168.10.0/24
################# SEZIONE GATEWAY #######################
echo 1 > /proc/sys/net/ipv4/ip_forward
iptables -t nat -A POSTROUTING -o $INT_RETE_ESTERNA -j MASQUERADE
ifconfig $INT_RETE_INTERNA 192.168.10.22 netmask 255.255.255.0 up
dhcpd $INT_RETE_INTERNA
################ SEZIONE FIREWALL FILTRANTE #############
echo 1 > /proc/sys/net/ipv4/tcp_syncookies #contro il syn flood
echo 1 > /proc/sys/net/ipv4/conf/all/rp_filter #contro Ip spoofing
iptables -F
iptables -P INPUT DROP
iptables -P OUTPUT ACCEPT
iptables -P FORWARD DROP
#SEZIONE INPUT
iptables -A INPUT -s 127.0.0.1 -d 127.0.0.1 -i lo -j ACCEPT
#iptables -A INPUT -p all -s $IP_ACCETTA1 -j ACCEPT
#iptables -A INPUT -p all -s $IP_ACCETTA2 -j ACCEPT
iptables -A INPUT -i $INT_RETE_INTERNA -j ACCEPT
iptables -A INPUT -i $INT_RETE_ESTERNA -p all -m state --state ESTABLISHED,RELATED -j ACCEPT
#SEZIONE FORWARD PER LA LAN
iptables -A FORWARD -i $INT_RETE_INTERNA -p all -s $LANIN -d $LANIN -j ACCEPT
iptables -A FORWARD -s $LANIN -d 0/0 -j ACCEPT -o ppp0
iptables -A FORWARD -s 0/0 -d $LANIN -p tcp --syn -j DROP -o ppp0
iptables -A FORWARD -s 0/0 -d $LANIN -j ACCEPT -o ppp0
spero di aver fornito tutti i dati utili.
grazie in anticipo.
