RH9 promiscuous mode

[Leovino A. Trinidad, Jr]

Hi! I have a newly installed RH9 and once in a while it gives a "promiscous mode" prompt. If this appears all of its network interfaces stopped responding. If I restart the iptables the network activity returns.

[Steven E. Protter]

You most likely have a configuration issue with iptables.

A few steps.

Upload the file /etc/sysconfig/iptables to this forum and I'll try and help you do some edits.

Next.

service iptables stop

Check networking.

ifconfig

See what is up and if you can use ping and traceroute on other machines on the network.

Also, lets look at the logs for errors.

/var/log/boot.log

dmesg

You might have a networking problem.

I'm going to be up for a while and can help you if you have time.

SEP

[Leovino A. Trinidad, Jr]

Hi Steven! Thank you so much for the reply. Here's my iptables file as you requested. By-the-way, I also have a portsentry in my server... I also checked the boot log and found no error on startup.

Regards.

[Leovino A. Trinidad, Jr]

Hi Steven! Thank you so much for the reply. Here's my iptables file as you requested. By-the-way, I also have a portsentry in my server... I also checked the boot log and found no error on startup.

Regards.

[Leovino A. Trinidad, Jr]

Hi Steven! Thank you so much for the reply. Here's my iptables file as you requested. By-the-way, I also have a portsentry in my server... I also checked the boot log and found no error on startup.

Regards.

[Leovino A. Trinidad, Jr]

Hi Steven! Thank you so much for the reply. Here's my iptables file as you requested. By-the-way, I also have a portsentry in my server... I also checked the boot log and found no error on startup.

Regards.

[Leovino A. Trinidad, Jr]

Hi Steven! Thank you so much for the reply. Here's my iptables file as you requested. By-the-way, I also have a portsentry in my server... I also checked the boot log and found no error on startup.

Regards.

[Leovino A. Trinidad, Jr]

Hi Steven! Thank you so much for the reply. Here's my iptables file as you requested. By-the-way, I also have a portsentry in my server... I also checked the boot log and found no error on startup.

Regards.

[Leovino A. Trinidad, Jr]

Hi Steven! Thank you so much for the reply. Here's my iptables file as you requested. By-the-way, I also have a portsentry in my server... I also checked the boot log and found no error on startup.

Regards.

[Leovino A. Trinidad, Jr]

Hi Steven! Thank you so much for the reply. Here's my iptables file as you requested. By-the-way, I also have a portsentry in my server... I also checked the boot log and found no error on startup.

Regards.

[Leovino A. Trinidad, Jr]

Hi Steven! Thank you so much for the reply. Here's my iptables file as you requested. By-the-way, I also have a portsentry in my server... I also checked the boot log and found no error on startup.

Regards.

[Leovino A. Trinidad, Jr]

Hi Steven! Thank you so much for the reply. Here's my iptables file as you requested. By-the-way, I also have a portsentry in my server... I also checked the boot log and found no error on startup. I did ping and tracert and worked well.

Regards.

[Leovino A. Trinidad, Jr]

I apologize for the number of sent items... I was having a problem sending the attachment file.

Regards.

[Steven E. Protter]

My first look at the iptables file.

Nicely done.

I like the way you used variables so you can make global changes.

Looks like a generic web/mail server

Port 80 for http

443 and 8080 for secure stuff.

port 21 for ftp
port 22 for ssh
port 25 for smtp

The server is also providing SNAT and Internet access to for the internal network.

Before we start messing with this(and I'm perfectly willing to do that for a few poitns), lets take a simpler diagnostic approch.

When the problem occurs, run service iptables stop

Does the problem go away?

does ping/traceroute work.

Can you access httpd pages from inside and outside your network?

ifconfig shows up interfaces?

If so, its iptables we must hack. If not, we need to take steps to identify the problem.

Let me know.

Be patient with the posting, get it set up hit submit once and give it 10 minutes to post, even if you get a 404 error.

Something is up in hp land.

You can go to General Forums Issues for May and ask HP to clean up the duplicate posts.

SEP

[Leovino A. Trinidad, Jr]

Hi Steven! Thank you for your help! I already fixed the problem. It's in clearing the iptables, it should have ACCEPT policy in INPUT, OUTPUT and/or FORWARD after the Flush/Delete. Without it, traffic will not be allowed to passthrough. Another thing in installing the new version of portsentry, it modifies the crond daemon to restart the iptables and portsentry on every 6hrs...That's why the error occurs occasionally... Well, thank you so much for helping me... I'll give you 7 for it.