New FC2 not allowing ssh connections

[Bob McClure Jr]

On Mon, Nov 15, 2004 at 10:29:20AM -0800, Mark Knecht wrote:
> On Mon, 15 Nov 2004 09:21:05 -0800, Rick Stevens
> <rstevens at vitalstream.com> wrote:
> > Mark Knecht wrote:
> > 
> > 
> > > Hi,
> > >    I built a new FC2 machine from scratch recently. It's been working
> > > fine for outgoing connections. Today I wanted to connect to it but
> > > haven't been able to. When I attempt to connect to it from my laptop
> > > or another FC2 desktop I get:
> > >
> > > flash mark $ ssh -X -Y -C -c blowfish -l mark 192.168.10.101
> > > ssh: connect to host 192.168.10.101 port 22: No route to host
> > > flash mark $
> > 
> > You have a routing issue on flash, Mark.  Check "netstat -rn" and verify
> > that a) your default route is correct and b) that your netmask is
> > correct.  192.168 is a non-internet-routable class B (/16) network, so
> > you can safely get by with a "255.255.0.0" netmask.
> > 
> > >    I've started sshd and looked at /etc/rc.d/init.d/sshd_config. It
> > > says it allows X11Forwarding. It has port 22 commented out, but I
> > > assume that's OK. Anyway, I tried uncommenting it and restarting sshd
> > > but no improvement.
> > 
> > It's not an SSH issue, it's a routing issue.  You have no route to the
> > 192.168.10 network.  If you can dump out the results of "ifconfig -a"
> > and "netstat -rn", we can help.
> 
> Rick,
>    This did not seem to be the case, or I am still misunderstanding you. 
> 
> Gentoo -> Gentoo - worked
> Gentoo - FC2 - failed
> FC2 -> Gentoo - worked
> FC2 -> FC2 - failed
> 
> Gentoo -> FC2 (with iptables disabled at target) - worked
> FC2 -> FC2 (with iptables disabled at target) - worked
> 
> Why is this a routing issue on the Gentoo box?
> 
> Certainly I could have a routing issue on ALL machines I suppose. I
> set all machines up the same way, or as close as I could with scripts
> all being a bit different, and some boxes are fixed IP and one box was
> DHCP from the router. But why should disabling iptables on an FC2 box
> have 'fixed' a routing issue on a Gentoo box?
> 
> Thanks!
> Mark

Mark, Rick may not be aware that you fixed it by turning off IPTABLES
on the FC2 box(es).  That is true, is it not?

Cheers,
-- 
Bob McClure, Jr.             Bobcat Open Systems, Inc.
robertmcclure at earthlink.net  http://www.bobcatos.com
Grace happens.