www.hostmaster.gr & masquarade

Mon Jan 21 15:49:01 EET 2002

emena pantos paizei to www.hostmaster.gr xoris kanena problhma kai apo to PC
kai apo ola ta PC ths etairias pou bgenoun me IP/MASK apo Linux.
To traceroute pantos stamataei...

tracert www.hostmaster.gr

Tracing route to pythia.ics.forth.gr [139.91.223.61]
over a maximum of 30 hops:

  1   <10 ms   <10 ms   <10 ms  88.88.88.250
  2   <10 ms   <10 ms   <10 ms  212.251.78.97
  3    30 ms    40 ms    40 ms  212.251.75.81
  4    30 ms    40 ms    40 ms  titan-fa4103.forthnet.gr [194.219.235.129]
  5    40 ms    40 ms    40 ms  core-ath-01.forthnet.gr [194.219.227.98]
  6    40 ms   160 ms   190 ms  tromos-s201.forthnet.gr [194.219.199.38]
  7   230 ms    50 ms    61 ms  fovos.forthnet.gr [193.92.145.100]
  8   140 ms    80 ms    50 ms  194.219.253.146
  9  139.91.150.80  reports: Destination net unreachable.

Trace complete.

-----Original Message-----
From: linux-greek-users-admin at lists.hellug.gr
[mailto:linux-greek-users-admin at lists.hellug.gr]On Behalf Of Filippos Slavik
Sent: Monday, January 21, 2002 3:09 PM
To: I.Ioannou
Cc: linux-greek-users at lists.hellug.gr
Subject: Re: www.hostmaster.gr & masquarade

At 11:06 ðì 21/1/2002 +0200, you wrote:
>On Sun, Jan 20, 2002 at 08:12:40PM +0200, Giorgos Pallas wrote:
> >
> > Ama deis ston hop 7 (139.91.34.82) den yparxei dns kataxwrisi.[akribws
> > ekei pou sou kollaei ]
> > Mipws auto ftaiei? (to pws mporei na ftaiei pantws, nten kserei...)
>
>
>Den mou kollaei, to akribws proigoumeno hop mou apantaei 'network
unreachable'
>
>Kanas allos na to kanei confirm apo mixanima pisw apo linux me masquarade ?
>Egw to exw diapistwsei se 3 egkatastaseis mexri twra, me to firewall
>na exei 2.2.x kai ipchains, kai se mia me 2.4.x me iptables
>
>roryt

Ta mhxanimata twn hostmaster

1) den exoun reverse dns entry (auto profanws den se peirazei)
2) To ITE (FORTH) exei "sklhro" security policy - Px, exoun kopsei pantelos
ta ICMP apo ton eksw kosmo (oute auto den "eprepe" na se peirazei)

Pantws, kata thn proswpikh mou apopsei, tha se kobei kapoio routeraki tou
ITE, giati pithanon to masquarating na bazei kapoio tag/mark sta outgoing
paketa (to opoio xrisimopoiei later gia na kanei re-assemble to respone sto
paketo auto kai na to steilh pisw sto node tou eswterikou sou dyktiou) to
opoio na "trelainei' to routeraki :) Anyway, den eimai kai poly sigouros
gia'uto pou grafw (den ksairw kai toso kala thn eswterikh domh tou SNAT kai
pws ginetai to implementation), logika den tha eprepe na exeis problima ...

PS: Den exw kapoia sxesh me to dyktio tou ITE :) Aplws kanw eikasies

Slavikos

>--
>linux-greek-users mailing list -- http://lists.hellug.gr

################################################################
Filippos Slavik
FORTHnet R&D, Heraklion, Greece
e-mail: fsla at forthnet.gr
phone: (+3) 081 391230
################################################################

"The software said 'runs on Win95 or better,' so I installed it
on Linux..."

--
linux-greek-users mailing list -- http://lists.hellug.gr