[K12OSN] Outside access to K12ltsp intermittently cut off

[Henning Bertelsen]

Hi

I use shorewall too, and I had the same problem when connecting through a
dial upp ISP.
Shorewall is blocking some IP adresses in the /etc/shorewall/rfc1918 file.
I commented out IP adresses beginning with 82, 84, 88, and 96, then did a
"shorewall restart".

Check your /var/log/messages file to see if you find something like
shorewall:rfc1918:DROP    at the time you try to log in.
What Ip adress do you have when it does not work?

Anyway a better forum would probably be the shorewall mailing list, You can
find it at http://www.shorewall.net.


//Henning







----- Original Message ----- 
From: "Duane Wilson" <aaa at pacifier.com>
To: <K12OSN at redhat.com>
Sent: Tuesday, September 07, 2004 9:48 PM
Subject: [K12OSN] Outside access to K12ltsp intermittently cut off


> This may not be the right forum for this question.  If anyone can think
> of a better place to ask this question feel free to advise.
>
> I use ssh remotely to administer a K12ltsp system
>
> Sometimes I can ssh in,  sometimes I get no response with ssh or ping to
> that address.  An hour or two later it works without any intervention.
>
> My firewall/router/squid/dansguardian box is an older Compac proliant G2
>  server with 2 nics.  One nic faces my ISP with a static IP address.
>  The other nic faces my K12ltsp server.
>   The firewall box is running shorewall for my iptables rules generator.
>
> Wierd thing is that even when it won't respond to anything from outside
> it still works fine for internet access from inside!
>
> I have been fighting this problem for a year.  It happened with K12ltsp
> 4.0 and continues with a fresh install of 4.1
>
> I have asked local linux gurus and gotten nothing more than scratching
> heads and blank looks.
>
> Anyone have any idea what I might try to diagnose this?
>
>
> Thanks,
>
>
> Duane Wilson
>
>
>
> _______________________________________________
> K12OSN mailing list
> K12OSN at redhat.com
> https://www.redhat.com/mailman/listinfo/k12osn
> For more info see <http://www.k12os.org>
>