-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HI gang, I have a setup like this: palmtx -> computer --> firewall/dns_server The connection between the palmtx and the computer is a PPP connection (ppp0) over bluetooth, which works fine between the palmtx and the computer. The connection between the computer and the firewall is ethernet (eth0), and it also works fine. My problem is that I can't get the palmtx to get dns responses back from the dns server. I ran ethereal on eth0 and ppp0. I can see the DNS query go from the palmtx to the computer, and out to the firewall on eth0. The firewall responds onto eth0, but the computer doesn't seem to be sending that back to the palmtx on ppp0. On the computer, routing is enabled (or the dns server wouldn't have seen the initial request). The route table has the entry (1st in the list) for the PPP connection. iptables is set to accept everything. What did I miss? Thanks! Andy - -- Andy Stewart, Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFE4+1tHl0iXDssISsRAmVEAJ4/yMPiP3Qrm8twHyLxdgJYKJEAtQCfeGmw 4J+q1cxJh9v6GyjomZPMSEg= =0wJS -----END PGP SIGNATURE-----
On Thu, 17 Aug 2006, Andy Stewart wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
HI gang,
I have a setup like this:
palmtx -> computer --> firewall/dns_server
The connection between the palmtx and the computer is a PPP connection (ppp0) over bluetooth, which works fine between the palmtx and the computer.
The connection between the computer and the firewall is ethernet (eth0), and it also works fine.
My problem is that I can't get the palmtx to get dns responses back from the dns server.
I ran ethereal on eth0 and ppp0. I can see the DNS query go from the palmtx to the computer, and out to the firewall on eth0. The firewall responds onto eth0, but the computer doesn't seem to be sending that back to the palmtx on ppp0.
On the computer, routing is enabled (or the dns server wouldn't have seen the initial request). The route table has the entry (1st in the list) for the PPP connection.
iptables is set to accept everything.
What did I miss?
Thanks!
Andy
Hi Andy, So are you doing NAT for the palmtx via the computer? What about, $ cat /proc/sys/net/ipv4/ip_forward Is it set to "1"? -Jamie
Andy> I have a setup like this: Andy> palmtx -> computer --> firewall/dns_server Andy> The connection between the palmtx and the computer is a PPP Andy> connection (ppp0) over bluetooth, which works fine between the Andy> palmtx and the computer. More details please. IP addresses, routes, netstat -rn on the computer, etc. Also, do you have iptables turned on the computer, or any other firewalling type of software? So when the DNS response comes back, what do your NAT table logs and such say? Andy> The connection between the computer and the firewall is ethernet (eth0), Andy> and it also works fine. Andy> My problem is that I can't get the palmtx to get dns responses back from Andy> the dns server. Andy> I ran ethereal on eth0 and ppp0. I can see the DNS query go from the Andy> palmtx to the computer, and out to the firewall on eth0. The firewall Andy> responds onto eth0, but the computer doesn't seem to be sending that Andy> back to the palmtx on ppp0. Andy> On the computer, routing is enabled (or the dns server wouldn't have Andy> seen the initial request). The route table has the entry (1st in the Andy> list) for the PPP connection. Andy> iptables is set to accept everything. Andy> What did I miss? Andy> Thanks! Andy> Andy Andy> - -- Andy> Andy Stewart, Founder Andy> Worcester Linux Users' Group Andy> Worcester, MA, USA Andy> http://www.wlug.org Andy> -----BEGIN PGP SIGNATURE----- Andy> Version: GnuPG v1.2.5 (GNU/Linux) Andy> Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org Andy> iD8DBQFE4+1tHl0iXDssISsRAmVEAJ4/yMPiP3Qrm8twHyLxdgJYKJEAtQCfeGmw Andy> 4J+q1cxJh9v6GyjomZPMSEg= Andy> =0wJS Andy> -----END PGP SIGNATURE----- Andy> _______________________________________________ Andy> Wlug mailing list Andy> Wlug@mail.wlug.org Andy> http://mail.wlug.org/mailman/listinfo/wlug Andy> !DSPAM:44e3eed4103371184020261!
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HI everybody, Upon further investigation, it appears that the dns server is not replying when the palmtx makes its dns request. The dns server does reply to everybody else on my network. I'll have to look at the dnsmasq configuration to see why that might be happening. I turned on logging for dnsmasq, and it definitely receives the query, and it receives a reply from the upstream dns server, but it doesn't send a reply to the palmtx. I turned off the firewalling to see if it was eating the dns reply, but that doesn't seem to be happening. More news later, Andy - -- Andy Stewart, Founder Worcester Linux Users' Group Worcester, MA, USA http://www.wlug.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFE5SnOHl0iXDssISsRArkAAJ0cejcUErAjfMGGmnbd4IKN1IrP6gCeKv/R AAPd7HDzK2lR5W2/3REYov0= =2QZu -----END PGP SIGNATURE-----
participants (3)
-
Andy Stewart -
Jamie Guinan -
John Stoffel