rendered paste bodysuursavo:~# ./print-net-settings
+ LC_ALL=C
+ date
Sun Mar 9 15:19:29 EET 2008
+ hostname
suursavo.org
+ for i in /proc/sys/net/ipv4/ip_forward '/proc/sys/net/ipv4/conf/*/proxy_arp' '/proc/sys/net/ipv4/conf/*/rp_filter' '/proc/net/bonding/bond*'
+ cat /proc/sys/net/ipv4/ip_forward
0
+ for i in /proc/sys/net/ipv4/ip_forward '/proc/sys/net/ipv4/conf/*/proxy_arp' '/proc/sys/net/ipv4/conf/*/rp_filter' '/proc/net/bonding/bond*'
+ cat /proc/sys/net/ipv4/conf/all/proxy_arp
0
+ for i in /proc/sys/net/ipv4/ip_forward '/proc/sys/net/ipv4/conf/*/proxy_arp' '/proc/sys/net/ipv4/conf/*/rp_filter' '/proc/net/bonding/bond*'
+ cat /proc/sys/net/ipv4/conf/default/proxy_arp
0
+ for i in /proc/sys/net/ipv4/ip_forward '/proc/sys/net/ipv4/conf/*/proxy_arp' '/proc/sys/net/ipv4/conf/*/rp_filter' '/proc/net/bonding/bond*'
+ cat /proc/sys/net/ipv4/conf/eth0/proxy_arp
0
+ for i in /proc/sys/net/ipv4/ip_forward '/proc/sys/net/ipv4/conf/*/proxy_arp' '/proc/sys/net/ipv4/conf/*/rp_filter' '/proc/net/bonding/bond*'
+ cat /proc/sys/net/ipv4/conf/eth1/proxy_arp
0
+ for i in /proc/sys/net/ipv4/ip_forward '/proc/sys/net/ipv4/conf/*/proxy_arp' '/proc/sys/net/ipv4/conf/*/rp_filter' '/proc/net/bonding/bond*'
+ cat /proc/sys/net/ipv4/conf/lo/proxy_arp
0
+ for i in /proc/sys/net/ipv4/ip_forward '/proc/sys/net/ipv4/conf/*/proxy_arp' '/proc/sys/net/ipv4/conf/*/rp_filter' '/proc/net/bonding/bond*'
+ cat /proc/sys/net/ipv4/conf/tun0/proxy_arp
0
+ for i in /proc/sys/net/ipv4/ip_forward '/proc/sys/net/ipv4/conf/*/proxy_arp' '/proc/sys/net/ipv4/conf/*/rp_filter' '/proc/net/bonding/bond*'
+ cat /proc/sys/net/ipv4/conf/all/rp_filter
0
+ for i in /proc/sys/net/ipv4/ip_forward '/proc/sys/net/ipv4/conf/*/proxy_arp' '/proc/sys/net/ipv4/conf/*/rp_filter' '/proc/net/bonding/bond*'
+ cat /proc/sys/net/ipv4/conf/default/rp_filter
0
+ for i in /proc/sys/net/ipv4/ip_forward '/proc/sys/net/ipv4/conf/*/proxy_arp' '/proc/sys/net/ipv4/conf/*/rp_filter' '/proc/net/bonding/bond*'
+ cat /proc/sys/net/ipv4/conf/eth0/rp_filter
0
+ for i in /proc/sys/net/ipv4/ip_forward '/proc/sys/net/ipv4/conf/*/proxy_arp' '/proc/sys/net/ipv4/conf/*/rp_filter' '/proc/net/bonding/bond*'
+ cat /proc/sys/net/ipv4/conf/eth1/rp_filter
0
+ for i in /proc/sys/net/ipv4/ip_forward '/proc/sys/net/ipv4/conf/*/proxy_arp' '/proc/sys/net/ipv4/conf/*/rp_filter' '/proc/net/bonding/bond*'
+ cat /proc/sys/net/ipv4/conf/lo/rp_filter
0
+ for i in /proc/sys/net/ipv4/ip_forward '/proc/sys/net/ipv4/conf/*/proxy_arp' '/proc/sys/net/ipv4/conf/*/rp_filter' '/proc/net/bonding/bond*'
+ cat /proc/sys/net/ipv4/conf/tun0/rp_filter
0
+ for i in /proc/sys/net/ipv4/ip_forward '/proc/sys/net/ipv4/conf/*/proxy_arp' '/proc/sys/net/ipv4/conf/*/rp_filter' '/proc/net/bonding/bond*'
+ cat '/proc/net/bonding/bond*'
cat: /proc/net/bonding/bond*: No such file or directory
+ ip rule list
0: from all lookup 255
32766: from all lookup main
32767: from all lookup default
++ ip rule list
++ sort
++ uniq
++ cut '-d ' -f4
+ for i in '`ip rule list|cut -d'\'' '\'' -f4|sort|uniq`'
+ ip route list table 255
broadcast 192.168.0.255 dev eth1 proto kernel scope link src 192.168.0.105
broadcast 127.255.255.255 dev lo proto kernel scope link src 127.0.0.1
broadcast 83.150.94.255 dev eth0 proto kernel scope link src 83.150.94.189
local 83.150.94.189 dev eth0 proto kernel scope host src 83.150.94.189
local 192.168.0.105 dev eth1 proto kernel scope host src 192.168.0.105
broadcast 192.168.0.0 dev eth1 proto kernel scope link src 192.168.0.105
broadcast 83.150.94.0 dev eth0 proto kernel scope link src 83.150.94.189
local 10.1.1.1 dev tun0 proto kernel scope host src 10.1.1.1
broadcast 127.0.0.0 dev lo proto kernel scope link src 127.0.0.1
local 127.0.0.1 dev lo proto kernel scope host src 127.0.0.1
local 127.0.0.0/8 dev lo proto kernel scope host src 127.0.0.1
+ for i in '`ip rule list|cut -d'\'' '\'' -f4|sort|uniq`'
+ ip route list table default
+ for i in '`ip rule list|cut -d'\'' '\'' -f4|sort|uniq`'
+ ip route list table main
10.1.1.2 dev tun0 proto kernel scope link src 10.1.1.1
192.168.0.0/24 dev eth1 proto kernel scope link src 192.168.0.105
83.150.94.0/24 dev eth0 proto kernel scope link src 83.150.94.189
default via 83.150.94.254 dev eth0
+ ip link show
1: lo: <LOOPBACK,UP,10000> mtu 16436 qdisc noqueue
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth1: <BROADCAST,MULTICAST,UP,10000> mtu 1500 qdisc pfifo_fast qlen 1000
link/ether 00:05:02:c9:b4:b3 brd ff:ff:ff:ff:ff:ff
3: eth0: <BROADCAST,MULTICAST,UP,10000> mtu 1500 qdisc pfifo_fast qlen 1000
link/ether 00:10:b5:96:b2:ed brd ff:ff:ff:ff:ff:ff
4: eth2: <BROADCAST,MULTICAST> mtu 240 qdisc noop qlen 1000
link/ieee1394 08:00:07:02:00:00:00:00 brd ff:ff:ff:ff:ff:ff:ff:ff
5: sit0: <NOARP> mtu 1480 qdisc noqueue
link/sit 0.0.0.0 brd 0.0.0.0
32: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,10000> mtu 1500 qdisc pfifo_fast qlen 100
link/[65534]
+ ip addr show
1: lo: <LOOPBACK,UP,10000> mtu 16436 qdisc noqueue
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth1: <BROADCAST,MULTICAST,UP,10000> mtu 1500 qdisc pfifo_fast qlen 1000
link/ether 00:05:02:c9:b4:b3 brd ff:ff:ff:ff:ff:ff
inet 192.168.0.105/24 brd 192.168.0.255 scope global eth1
inet6 fe80::205:2ff:fec9:b4b3/64 scope link
valid_lft forever preferred_lft forever
3: eth0: <BROADCAST,MULTICAST,UP,10000> mtu 1500 qdisc pfifo_fast qlen 1000
link/ether 00:10:b5:96:b2:ed brd ff:ff:ff:ff:ff:ff
inet 83.150.94.189/24 brd 83.150.94.255 scope global eth0
inet6 2001:1bc8:102:4ebb::2/64 scope global
valid_lft forever preferred_lft forever
inet6 fe80::210:a4ff:fee3:9566/10 scope link
valid_lft forever preferred_lft forever
4: eth2: <BROADCAST,MULTICAST> mtu 240 qdisc noop qlen 1000
link/ieee1394 08:00:07:02:00:00:00:00 brd ff:ff:ff:ff:ff:ff:ff:ff
5: sit0: <NOARP> mtu 1480 qdisc noqueue
link/sit 0.0.0.0 brd 0.0.0.0
32: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,10000> mtu 1500 qdisc pfifo_fast qlen 100
link/[65534]
inet 10.1.1.1 peer 10.1.1.2/32 scope global tun0
+ ip neigh show
192.168.0.149 dev eth1 lladdr 00:17:08:65:6e:c0 STALE
192.168.0.115 dev eth1 lladdr 00:04:61:a5:2c:59 REACHABLE
83.150.94.254 dev eth0 lladdr 00:06:4f:43:d8:34 REACHABLE
192.168.0.132 dev eth1 INCOMPLETE
+ iptables -t filter -nvL
Chain INPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT 41 -- * * 0.0.0.0/0 0.0.0.0/0
493 53809 ACCEPT 0 -- lo * 127.0.0.1 0.0.0.0/0
603 43007 ACCEPT 0 -- eth1 * 192.168.0.0/16 0.0.0.0/0
2 104 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:18688
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:57416
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:3306
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:110
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:995
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:113
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:993
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:25
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:443
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:81
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:1194
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80
0 0 ACCEPT icmp -- * * 127.0.0.1 0.0.0.0/0
0 0 ACCEPT icmp -- * * 0.0.0.0/0 83.150.94.189 icmp type 8 state NEW,RELATED,ESTABLISHED
0 0 ACCEPT icmp -- * * 0.0.0.0/0 83.150.94.189 icmp type 0 state RELATED,ESTABLISHED
0 0 DROP tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpts:0:1023
12 928 DROP udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 udp dpts:0:1023
0 0 DROP tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02
36 4890 ACCEPT tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
4 480 ACCEPT udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
1 72 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:53
0 0 ACCEPT udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:1194 state NEW
0 0 DROP 0 -- tun0 * 0.0.0.0/0 0.0.0.0/0
Chain FORWARD (policy DROP 1 packets, 110 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT tcp -- eth0 * 0.0.0.0/0 192.168.0.144 tcp dpt:57416
0 0 DROP tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp dpts:0:1023
0 0 DROP udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 udp dpts:0:1023
0 0 DROP tcp -- eth0 * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02
880 51648 ACCEPT 0 -- eth1 eth0 192.168.0.0/16 0.0.0.0/0
740 83434 ACCEPT tcp -- eth0 eth1 0.0.0.0/0 192.168.0.0/16 state RELATED,ESTABLISHED
0 0 ACCEPT udp -- eth0 eth1 0.0.0.0/0 192.168.0.0/16 state RELATED,ESTABLISHED
1 56 DROP 0 -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT 0 -- tun0 * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT 0 -- * tun0 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT tcp -- eth1 * 0.0.0.0/0 192.168.0.144 tcp dpt:57416
Chain OUTPUT (policy ACCEPT 955 packets, 141K bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT icmp -- * * 83.150.94.189 0.0.0.0/0 icmp type 0 state RELATED,ESTABLISHED
0 0 ACCEPT icmp -- * * 83.150.94.189 0.0.0.0/0 icmp type 8 state NEW,RELATED,ESTABLISHED
+ iptables -t nat -nvL
Chain PREROUTING (policy ACCEPT 3 packets, 716 bytes)
pkts bytes target prot opt in out source destination
0 0 DNAT tcp -- eth0 * 0.0.0.0/0 83.150.94.189 tcp dpt:57416 to:192.168.0.144:57416
Chain POSTROUTING (policy ACCEPT 14 packets, 999 bytes)
pkts bytes target prot opt in out source destination
11 777 MASQUERADE 0 -- * eth0 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT 24 packets, 1716 bytes)
pkts bytes target prot opt in out source destination
+ iptables -t mangle -nvL
Chain PREROUTING (policy ACCEPT 2 packets, 162 bytes)
pkts bytes target prot opt in out source destination
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
+ cat /etc/resolv.conf
#search org
#nameserver 217.30.180.230
#nameserver 2001:1BC8:100C:A180::230
nameserver 127.0.0.1
suursavo:~#