[Sis-SCPS-INTEREST] something wrong

Roublev Sergey roublev at mediasputnik.ru
Thu Aug 17 10:37:58 EDT 2006


If default gateway on (B) and (C) is not set no packets go throw
them.

If I set on (B): route add default gw 172.20.1.191
and on (c): route add default gw 172.20.8.1
any traffic can go throw the network

I don't anderstand if I needed such rules

How can I guess that my gateways work properly?

Am I right that gateways should establish new tcp sessions to each
other
> If the TCP PROXY process is not running, can you ping/ssh end to end?

> Best Regards

>         Pat

>>>-----Original Message-----
>>>From: sis-scps-interest-bounces at mailman.ccsds.org 
>>>[mailto:sis-scps-interest-bounces at mailman.ccsds.org] On 
>>>Behalf Of Roublev Sergey
>>>Sent: Wednesday, August 16, 2006 7:58 AM
>>>To: sis-scps-interest at mailman.ccsds.org
>>>Subject: [Sis-SCPS-INTEREST] something wrong
>>>
>>>Hi, all
>>>
>>>I'm trying to test SCPS gateyay in such way:
>>>
>>>(A) - (B) - (C) - (D)
>>>
>>>B, C - gateways, connected via ethernet
>>>A, B - single computers
>>>
>>>A:  eth0 172.19.1.185
>>>    default gateway 172.19.8.1
>>>
>>>B:  eth0 172.19.8.1
>>>    eth1 172.20.8.1
>>>
>>>C:  eth0 172.16.0.1
>>>    eth1 172.20.1.191
>>>
>>>D:  eth0 172.16.0.2
>>>    default gateway 172.16.0.1
>>>
>>>on (A) I type:  ssh 172.16.0.2
>>>
>>>on (B) By tcpdump I capture packets on eth0, but on eth1 I saw
> nothing
>>>
>>>my rfile on both gateways :
>>>
>>>AIF_NAME        eth0
>>>AIF_RATE        10000000
>>>AIF_BUF         32768
>>>AIF_CC          1
>>>AIF_TCPONLY     1
>>>AIF_MTU         1500
>>>AIF_TUN_NAME    tun0
>>>
>>>
>>># interface B info
>>>BIF_NAME        eth1
>>>BIF_BUF         1000000
>>>BIF_RATE        1000000
>>>BIF_CC          0
>>>BIF_MINRTO      600000
>>>BIF_TUN_NAME    tun1
>>>
>>># IPFW info
>>>C_DIVPORT       52000
>>>C_TUN_NAME      tun2
>>>
>>>both gateways are seems to start normaly
>>>
>>># ./gateway
>>>
>>>READ RSC FILE #0
>>>-----------------
>>> A-Interface eth0:
>>>   Buf size is 32768.
>>>   Receive buf size is 0.
>>>   Rate is 10000000.
>>>   Minimum Rate is 10000000.
>>>   Congestion control is 1.
>>>   Divert port is 53000.
>>>   MTU is 1500.
>>>   Sending MTU is 1500.
>>>   Minimum RTO is 250000.
>>>   Maximum RTO is 64000000.
>>>   Protocol Layering is 0.
>>>   Default network layer is 1.
>>>   Timestamps is 1.
>>>   SNACKS is 1.
>>>   nodelay is is 0.
>>>   Only offer TCP is 1.
>>> B-Interface eth1:
>>>   Buf size is 1000000.
>>>   Receive buf size is 0.
>>>   Rate is 1000000.
>>>   Minimum Rate is 1000000.
>>>   Divert port is 53001.
>>>   MTU is 1500.
>>>   Sending MTU is 1500.
>>>   Minimum RTO is 600000.
>>>   Maximum RTO is 64000000.
>>>   Protocol Layering is 0.
>>>   Default network layer is 1.
>>>   Timestamps is 1.
>>>   SNACKS is 1.
>>>   nodelay is is 0.
>>>Port C is 52000.
>>>   SCPS local UDP port is 7168.
>>>   SCPS remote UDP port is 7167.
>>>
>>>Trying to Open up tun
>>> Trying to Open up tun
>>> Trying to Open up tun
>>> Got eth0 interface address:  172.19.8.1
>>>Got eth1 interface address:  172.20.8.1
>>>RTNETLINK answers: No such process
>>>RTNETLINK answers: No such process
>>>RTNETLINK answers: No such process
>>>Nothing to flush.
>>>Nothing to flush.
>>>Nothing to flush.
>>>sh: XШЪШЪ©: command not found
>>>iptables:: iptables -A PREROUTING -t mangle -s 172.19.8.1 -j ACCEPT
>>>iptables:: iptables -A PREROUTING -t mangle -d 172.19.8.1 -j ACCEPT
>>>iptables:: iptables -A PREROUTING -t mangle -s 172.20.8.1 -j ACCEPT
>>>iptables:: iptables -A PREROUTING -t mangle -d 172.20.8.1 -j ACCEPT
>>>iptables:: iptables -A PREROUTING -t mangle --protocol tcp 
>>>--syn -i eth0 -j MARK --set-mark 1
>>>iptables:: iptables -A PREROUTING -t mangle --protocol tcp 
>>>--syn -i eth0 -j ACCEPT
>>>iptables:: iptables -A PREROUTING -t mangle --protocol tcp 
>>>--syn -i eth1 -j MARK --set-mark 2
>>>iptables:: iptables -A PREROUTING -t mangle --protocol tcp 
>>>--syn -i eth1 -j ACCEPT
>>>iptables:: iptables -A PREROUTING -t mangle --protocol tcp  
>>>-i eth0 -j MARK --set-mark 3
>>>iptables:: iptables -A PREROUTING -t mangle --protocol tcp  
>>>-i eth0 -j ACCEPT
>>>iptables:: iptables -A PREROUTING -t mangle --protocol tcp  
>>>-i eth1 -j MARK --set-mark 3
>>>iptables:: iptables -A PREROUTING -t mangle --protocol tcp  
>>>-i eth1 -j ACCEPT
>>>iptables:: iptables -A PREROUTING -t mangle --protocol 105  
>>>-i eth0 -j MARK --set-mark 3
>>>iptables:: iptables -A PREROUTING -t mangle --protocol 105  
>>>-i eth0 -j ACCEPT
>>>iptables:: iptables -A PREROUTING -t mangle --protocol 105  
>>>-i eth1 -j MARK --set-mark 3
>>>iptables:: iptables -A PREROUTING -t mangle --protocol 105  
>>>-i eth1 -j ACCEPT
>>>iptables:: ip rule add fwmark 1 table 200
>>>iptables:: ip rule add fwmark 2 table 201
>>>iptables:: ip rule add fwmark 3 table 202
>>>iptables:: ip addr add 10.99.99.1 peer 10.99.99.2 dev tun0
>>>iptables:: ip addr add 10.99.98.1 peer 10.99.98.2 dev tun1
>>>iptables:: ip addr add 10.99.97.1 peer 10.99.97.2 dev tun2
>>>iptables:: ip link set dev tun0 up
>>>iptables:: ip link set dev tun1 up
>>>iptables:: ip link set dev tun2 up
>>>iptables:: ip route add default dev tun0 table 200
>>>iptables:: ip route add default dev tun1 table 201
>>>iptables:: ip route add default dev tun2 table 202
>>>
>>>I can't understand where is the problem and do my gateways work
>>>properly
>>>
>>>I'm using CRUX linux on 2.6.15.6 kernel
>>>
>>>
>>>
>>>Best regards
>>> Roublev Sergey
> mailto:roublev at mediasputnik.ru
>>>
>>>
>>>_______________________________________________
>>>Sis-SCPS-INTEREST mailing list
>>>Sis-SCPS-INTEREST at mailman.ccsds.org
>>>http://mailman.ccsds.org/cgi-bin/mailman/listinfo/sis-scps-interest
>>>



-- 
Best regards
 Roublev Sergey                         mailto:roublev at mediasputnik.ru




More information about the Sis-SCPS-INTEREST mailing list