route (is it forwarding packets?) (sorry if duplicate).

[Chadley Wilson]

On Tue, 2004-08-24 at 14:17, Bob Chiodini wrote:
> On Tue, 2004-08-24 at 08:59, Chadley Wilson wrote:
> > Greetings Guys,
> > 
> > I am trying to understand this but I am confused! :=\
> > Is this table forwarding packets from one iface to the other?
> > 
> > [root at chadlin root]# route
> > Kernel IP routing table
> > Destination     Gateway  Genmask     Flags Metric Ref    Use
> > Iface
> > 192.168.10.0    *      255.255.255.0   U     0      0    0 eth0
> > 196.25.100.0    *      255.255.255.0   U     0      0    0 eth1
> > 127.0.0.0       *      255.0.0.0       U     0      0    0 lo
> > default         *      0.0.0.0         U     0      0    0 eth0
> > [root at chadlin root]# 
> > -- 
Interesting I have installed Fedora 2 on my Home PC and FC1 my server at
work. They are not linked in any way.At work I have two address ranges
and at home I have on.
I noticed last night at home that route was returning a route for a
network I never setup and never installed.
This morning I checked my route on my server and the same route is
there. My home PC has absolutley no internet access. an like wise my NFS
server. 

Here is the routing table,

 [root at preload RPMS]# route -n
Kernel IP routing table
Destination   Gateway     Genmask        Flags Metric Ref    Use Iface
192.168.10.0  0.0.0.0     255.255.255.0  U     0      0        0 bond0
169.254.0.0   0.0.0.0     255.255.0.0    U     0      0        0 bond0
127.0.0.0     0.0.0.0     255.0.0.0      U     0      0        0 lo
[root at preload RPMS]#

I configured the bond device but there is no IP range of 169.245. on any
of my networks. Where does this come from?

ifconfig output

[root at preload RPMS]# ifconfig
bond0     Link encap:Ethernet  HWaddr 00:0C:76:6C:5B:DB
          inet addr:192.168.10.2  Bcast:192.168.10.255 
Mask:255.255.255.0
          UP BROADCAST RUNNING MASTER MULTICAST  MTU:1500  Metric:1
          RX packets:47017452 errors:24 dropped:0 overruns:0 frame:24
          TX packets:149590146 errors:118384 dropped:0 overruns:0
carrier:118384
          collisions:1252680 txqueuelen:0
          RX bytes:225594064 (215.1 Mb)  TX bytes:1037621355 (989.5 Mb)
 
eth0      Link encap:Ethernet  HWaddr 00:0C:76:6C:5B:DB
          UP BROADCAST RUNNING SLAVE MULTICAST  MTU:1500  Metric:1
          RX packets:14308635 errors:0 dropped:0 overruns:0 frame:0
          TX packets:52015740 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:1280826048 (1221.4 Mb)  TX bytes:2835144967 (2703.8
Mb)
          Interrupt:11 Base address:0xe000
 
eth1      Link encap:Ethernet  HWaddr 00:0C:76:6C:5B:DB
          UP BROADCAST SLAVE MULTICAST  MTU:1500  Metric:1
          RX packets:14761676 errors:0 dropped:0 overruns:0 frame:0
          TX packets:46523998 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:3257765235 (3106.8 Mb)  TX bytes:3760420919 (3586.2
Mb)
          Interrupt:5 Base address:0xe400 Memory:ed321000-ed321038
 
eth2      Link encap:Ethernet  HWaddr 00:0C:76:6C:5B:DB
          UP BROADCAST SLAVE MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:24 dropped:0 overruns:0 frame:24
          TX packets:15436 errors:118384 dropped:0 overruns:0
carrier:118384
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 b)  TX bytes:109190577 (104.1 Mb)
          Interrupt:10 Base address:0xe800 Memory:ed323000-ed323038
 
eth3      Link encap:Ethernet  HWaddr 00:0C:76:6C:5B:DB
          UP BROADCAST RUNNING SLAVE MULTICAST  MTU:1500  Metric:1
          RX packets:17947145 errors:0 dropped:0 overruns:0 frame:0
          TX packets:51034976 errors:0 dropped:0 overruns:0 carrier:0
          collisions:1252680 txqueuelen:1000
          RX bytes:4276938417 (4078.8 Mb)  TX bytes:2922802644 (2787.4
Mb)
          Interrupt:11 Base address:0xec00 Memory:ed325000-ed325038
 
lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:1238 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1238 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:290014 (283.2 Kb)  TX bytes:290014 (283.2 Kb)
 
[root at preload RPMS]#

Should I remove this route and run a chkrootkit on my system?



> Chadley,
> 
> Maybe, maybe not.  What is the value in /proc/sys/net/ipv4/ip_forward ? 
> Last time I looked it defaulted to 0 (not forwarding).
> 
> Bob...
-- 
==========================================================
Chadley Wilson
Production Line Supervisor
Pinnacle Micro / Pinteq PTY(LTD)
chadley at pinteq.co.za
+270112653193
==========================================================
Penguin Power
RHCE in the making
==========================================================