[Linux 2.6] Connection pings sometimes
Shadow Hawkins on Wednesday, 05 May 2004 10:03:06
hi,
I've managed to setup my tunnel, but the pings from the pop only work when I'm actually transferring data over the tunnel. This is a screenshot from the relevant tunnel statistics: http://213.10.88.36/screenshots/sixxs.png
On monday I've set up an irc-client to just idle somewhere. It worked and the pop could ping me fine again, until the end of the day it stopped pinging again for some strange reason...
My routing table:
# ip -6 route
2001:838:300:65::/64 via :: dev sixxs metric 256 mtu 1280 advmss 1220
2001:838:334::/48 dev eth0 metric 1024 mtu 1500 advmss 1440
fe80::/64 dev eth0 metric 256 mtu 1500 advmss 1220
fe80::/64 via :: dev sixxs metric 256 mtu 1280 advmss 1220
ff00::/8 dev eth0 metric 256 mtu 1500 advmss 1220
ff00::/8 dev sixxs metric 256 mtu 1280 advmss 1220
default via 2001:838:300:65::1 dev sixxs metric 1024 mtu 1280 advmss 1220
unreachable default dev lo proto none metric -1 error -101 advmss 1220
Interface:
# ifconfig sixxs
sixxs Link encap:IPv6-in-IPv4
inet6 addr: fe80::d50a:5824/128 Scope:Link
inet6 addr: 2001:838:300:65::2/64 Scope:Global
UP POINTOPOINT RUNNING NOARP MTU:1280 Metric:1
RX packets:19328 errors:0 dropped:0 overruns:0 frame:0
TX packets:13263 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:17802233 (16.9 Mb) TX bytes:1283713 (1.2 Mb)
Thanks in advantage
[Linux 2.6] Connection pings sometimes
Jeroen Massar on Friday, 18 June 2004 11:01:54
You should learn to read the FAQ: My tunnel goes down after some idletime. I run Linux with iptables/NAT.
Edit: updated the url
[Linux 2.6] Connection pings sometimes
Shadow Hawkins on Thursday, 17 June 2004 18:50:42
The single line from the faq was not enough, I figured out that the problem was solved after I added these two lines to my firewall:
iptables -A INPUT --proto 41 -s $SIXXS_IP/32 -d $EXT_IP/32 -j ACCEPT
iptables -A OUTPUT --proto 41 -s $EXT_IP/32 -d $SIXXS_IP/32 -j ACCEPT
Of course, $SIXXS_IP is the pop's ip and $EXT_IP is the external ip.
[Linux 2.6] Connection pings sometimes
Jeroen Massar on Friday, 18 June 2004 11:02:39
That is then because you are firewalling the proto-41 away, not because of connection tracking.
Posting is only allowed when you are logged in. |