topic Re: RH9 promiscuous mode in Operating System - Linux

RH9 promiscuous mode

Leovino A. Trinidad, Jr — Fri, 30 May 2003 02:25:09 GMT

Hi! I have a newly installed RH9 and once in a while it gives a "promiscous mode" prompt. If this appears all of its network interfaces stopped responding. If I restart the iptables the network activity returns.

Re: RH9 promiscuous mode

Steven E. Protter — Fri, 30 May 2003 02:30:59 GMT

You most likely have a configuration issue with iptables.

A few steps.

Upload the file /etc/sysconfig/iptables to this forum and I'll try and help you do some edits.

Next.

service iptables stop

Check networking.

ifconfig

See what is up and if you can use ping and traceroute on other machines on the network.

Also, lets look at the logs for errors.

/var/log/boot.log

dmesg

You might have a networking problem.

I'm going to be up for a while and can help you if you have time.

SEP

Re: RH9 promiscuous mode

Leovino A. Trinidad, Jr — Fri, 30 May 2003 04:39:44 GMT

Hi Steven! Thank you so much for the reply. Here's my iptables file as you requested. By-the-way, I also have a portsentry in my server... I also checked the boot log and found no error on startup.

Regards.

Re: RH9 promiscuous mode

Leovino A. Trinidad, Jr — Fri, 30 May 2003 04:40:23 GMT

Re: RH9 promiscuous mode

Leovino A. Trinidad, Jr — Fri, 30 May 2003 04:40:51 GMT

Re: RH9 promiscuous mode

Leovino A. Trinidad, Jr — Fri, 30 May 2003 04:40:53 GMT

Re: RH9 promiscuous mode

Leovino A. Trinidad, Jr — Fri, 30 May 2003 04:40:57 GMT

Re: RH9 promiscuous mode

Leovino A. Trinidad, Jr — Fri, 30 May 2003 04:41:01 GMT

Re: RH9 promiscuous mode

Leovino A. Trinidad, Jr — Fri, 30 May 2003 04:41:45 GMT

Re: RH9 promiscuous mode

Leovino A. Trinidad, Jr — Fri, 30 May 2003 04:42:12 GMT

Re: RH9 promiscuous mode

Leovino A. Trinidad, Jr — Fri, 30 May 2003 04:42:58 GMT

Re: RH9 promiscuous mode

Leovino A. Trinidad, Jr — Fri, 30 May 2003 04:48:28 GMT

Re: RH9 promiscuous mode

Leovino A. Trinidad, Jr — Fri, 30 May 2003 04:54:39 GMT

I apologize for the number of sent items... I was having a problem sending the attachment file.

Regards.

Re: RH9 promiscuous mode

Steven E. Protter — Fri, 30 May 2003 05:45:19 GMT

My first look at the iptables file.

Nicely done.

I like the way you used variables so you can make global changes.

Looks like a generic web/mail server

Port 80 for http

443 and 8080 for secure stuff.

port 21 for ftp
port 22 for ssh
port 25 for smtp

The server is also providing SNAT and Internet access to for the internal network.

Before we start messing with this(and I'm perfectly willing to do that for a few poitns), lets take a simpler diagnostic approch.

When the problem occurs, run service iptables stop

Does the problem go away?

does ping/traceroute work.

Can you access httpd pages from inside and outside your network?

ifconfig shows up interfaces?

If so, its iptables we must hack. If not, we need to take steps to identify the problem.

Let me know.

Be patient with the posting, get it set up hit submit once and give it 10 minutes to post, even if you get a 404 error.

Something is up in hp land.

You can go to General Forums Issues for May and ask HP to clean up the duplicate posts.

SEP

Re: RH9 promiscuous mode

Leovino A. Trinidad, Jr — Tue, 03 Jun 2003 08:31:22 GMT

Hi Steven! Thank you for your help! I already fixed the problem. It's in clearing the iptables, it should have ACCEPT policy in INPUT, OUTPUT and/or FORWARD after the Flush/Delete. Without it, traffic will not be allowed to passthrough. Another thing in installing the new version of portsentry, it modifies the crond daemon to restart the iptables and portsentry on every 6hrs...That's why the error occurs occasionally... Well, thank you so much for helping me... I'll give you 7 for it.