Win7 не пингует шлюз на Ubuntu

[Rezor666]

Пинги с 7 на XP идут?
Если идут то покажите правила iptables

[Lonely_Mouse]

Мне тоже кажется, что проблема на серваке. Мб привязка по маку

[CountSH]

пинги идут, iptables в этом посте http://forum.oszone.net/post-2251515-23.html
на серваке привязок никаких нет 100%

[Rezor666]

iptables в этом посте »
Там route print, а не iptables.
В общем правила iptables в студию и выхлоп tcpdump.
Дело не в Windows 7, прекратите ее мучить.

[anderson-7]

прекратите ее мучить. »
Да уж так перемучили, что сами это знаем что она не причем.

[CountSH]

[root@gw ~]# tcpdump -i eth5
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth5, link-type EN10MB (Ethernet), capture size 96 bytes
12:23:18.265242 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 3219707527:3219707723(196) ack 3800085262 win 65535
12:23:18.265578 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 196 win 16720
12:23:18.267895 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 196:360(164) ack 1 win 65535
12:23:18.267969 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 360:492(132) ack 1 win 65535
12:23:18.268033 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 492:624(132) ack 1 win 65535
12:23:18.268209 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 492 win 16424
12:23:18.268236 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 624:888(264) ack 1 win 65535
12:23:18.268394 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 888:1020(132) ack 1 win 65535
12:23:18.268486 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 1020:1152(132) ack 1 win 65535
12:23:18.268534 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 888 win 17520
12:23:18.268616 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 1152:1300(148) ack 1 win 65535
12:23:18.268724 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 1300:1448(148) ack 1 win 65535
12:23:18.268724 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 1152 win 17256
12:23:18.268832 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 1448:1580(132) ack 1 win 65535
12:23:18.268940 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 1580:1728(148) ack 1 win 65535
12:23:18.268982 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 1448 win 16960
12:23:18.269062 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 1728:1876(148) ack 1 win 65535
12:23:18.269163 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 1876:2008(132) ack 1 win 65535
12:23:18.269194 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 1728 win 16680
12:23:18.269295 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 2008:2156(148) ack 1 win 65535
12:23:18.269412 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 2156:2304(148) ack 1 win 65535
12:23:18.269415 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 2008 win 16400
12:23:18.269521 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 2304:2436(132) ack 1 win 65535
12:23:18.269641 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 2436:2584(148) ack 1 win 65535
12:23:18.269671 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 2304 win 16104
12:23:18.269773 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 2584:2732(148) ack 1 win 65535
12:23:18.269872 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 2732:2864(132) ack 1 win 65535
12:23:18.269891 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 2584 win 17520
12:23:18.269983 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 2864:3012(148) ack 1 win 65535
12:23:18.270096 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 3012:3160(148) ack 1 win 65535
12:23:18.270129 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 2864 win 17240
12:23:18.270207 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 3160:3292(132) ack 1 win 65535
12:23:18.270315 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 3292:3440(148) ack 1 win 65535
12:23:18.270353 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 3160 win 16944
12:23:18.270455 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 3440:3588(148) ack 1 win 65535
12:23:18.270554 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 3588:3720(132) ack 1 win 65535
12:23:18.270567 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 3440 win 16664
12:23:18.270666 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 3720:3868(148) ack 1 win 65535
12:23:18.270780 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 3868:4016(148) ack 1 win 65535
12:23:18.270812 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 3720 win 16384
12:23:18.270906 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 4016:4148(132) ack 1 win 65535
12:23:18.271013 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 4148:4296(148) ack 1 win 65535
12:23:18.271035 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 4016 win 16088
12:23:18.271128 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 4296:4444(148) ack 1 win 65535
12:23:18.271235 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 4444:4576(132) ack 1 win 65535
12:23:18.271267 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 4296 win 17520
12:23:18.271346 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 4576:4724(148) ack 1 win 65535
12:23:18.271486 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 4576 win 17240
12:23:18.271502 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 4724:4872(148) ack 1 win 65535
12:23:18.271597 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 4872:5276(404) ack 1 win 65535
12:23:18.271693 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 5276:5696(420) ack 1 win 65535
12:23:18.271764 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 4872 win 16944
12:23:18.271824 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 5696:6196(500) ack 1 win 65535
12:23:18.271925 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 6196:6712(516) ack 1 win 65535
12:23:18.272004 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 5696 win 16120
12:23:18.272005 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 6712:6940(228) ack 1 win 65535
12:23:18.272094 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 6940:7088(148) ack 1 win 65535
12:23:18.272174 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 7088:7316(228) ack 1 win 65535
12:23:18.272254 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 7316:7464(148) ack 1 win 65535
12:23:18.272280 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 6712 win 17520
12:23:18.272299 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 7088 win 17144
12:23:18.272339 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 7464:7612(148) ack 1 win 65535
12:23:18.272436 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 7612:7840(228) ack 1 win 65535
12:23:18.272486 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 7464 win 16768
12:23:18.272522 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 7840:8068(228) ack 1 win 65535
12:23:18.272603 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 8068:8216(148) ack 1 win 65535
12:23:18.272683 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 8216:8444(228) ack 1 win 65535
12:23:18.272710 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 7840 win 16392
12:23:18.272768 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 8444:8592(148) ack 1 win 65535
12:23:18.272839 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 8216 win 17520
12:23:18.272855 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 8592:8740(148) ack 1 win 65535
12:23:18.272945 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 8740:8968(228) ack 1 win 65535
12:23:18.272997 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 8592 win 17144
12:23:18.273035 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 8968:9196(228) ack 1 win 65535
12:23:18.273113 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 9196:9344(148) ack 1 win 65535
12:23:18.273193 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 9344:9572(228) ack 1 win 65535
12:23:18.273223 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 8968 win 16768
12:23:18.273277 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 9572:9720(148) ack 1 win 65535
12:23:18.273354 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 9344 win 16392
12:23:18.273363 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 9720:9868(148) ack 1 win 65535
12:23:18.273452 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 9868:10096(228) ack 1 win 65535
12:23:18.273511 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 9720 win 17520
12:23:18.273537 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 10096:10324(228) ack 1 win 65535
12:23:18.273620 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 10324:10472(148) ack 1 win 65535
12:23:18.273694 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 10472:10700(228) ack 1 win 65535
12:23:18.273726 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 10096 win 17144
12:23:18.273775 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 10700:10848(148) ack 1 win 65535
12:23:18.273853 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 10848:10996(148) ack 1 win 65535
12:23:18.273858 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 10472 win 16768
12:23:18.273937 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 10996:11224(228) ack 1 win 65535
12:23:18.274013 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 10848 win 16392
12:23:18.274013 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 11224:11372(148) ack 1 win 65535
12:23:18.274111 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 11372:11600(228) ack 1 win 65535
12:23:18.274187 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 11600:11828(228) ack 1 win 65535
12:23:18.274211 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 11224 win 17520
12:23:18.274261 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 11828:11976(148) ack 1 win 65535
12:23:18.274356 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 11976:12204(228) ack 1 win 65535
12:23:18.274387 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 11600 win 17144
12:23:18.274436 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 12204:12352(148) ack 1 win 65535
12:23:18.274485 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 11976 win 16768
12:23:18.274520 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 12352:12500(148) ack 1 win 65535
12:23:18.274592 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 12500:12728(228) ack 1 win 65535
12:23:18.274668 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 12728:12956(228) ack 1 win 65535
12:23:18.274670 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 12352 win 16392
12:23:18.274752 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 12956:13104(148) ack 1 win 65535
12:23:18.274828 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 13104:13252(148) ack 1 win 65535
12:23:18.274867 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 12728 win 17520
12:23:18.274909 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 13252:13480(228) ack 1 win 65535
12:23:18.274982 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 13480:13628(148) ack 1 win 65535
12:23:18.274996 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 13104 win 17144
12:23:18.275095 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 13628:13856(228) ack 1 win 65535
12:23:18.275169 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 13480 win 16768
12:23:18.275190 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 13856:14084(228) ack 1 win 65535
12:23:18.275266 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 14084:14232(148) ack 1 win 65535
12:23:18.275340 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 14232:14460(228) ack 1 win 65535
12:23:18.275366 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 13856 win 16392
12:23:18.275421 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 14460:14608(148) ack 1 win 65535
12:23:18.275497 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 14232 win 16016
12:23:18.275517 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 14608:14836(228) ack 1 win 65535
12:23:18.275596 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 14836:14984(148) ack 1 win 65535
12:23:18.275642 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 14608 win 15640
12:23:18.275677 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 14984:15212(228) ack 1 win 65535
12:23:18.275749 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 15212:15360(148) ack 1 win 65535
12:23:18.275824 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 15360:15588(228) ack 1 win 65535
12:23:18.275827 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 14984 win 15264
12:23:18.275907 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 15588:15736(148) ack 1 win 65535
12:23:18.275973 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 15360 win 14888
12:23:18.275984 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 15736:15884(148) ack 1 win 65535
12:23:18.276074 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 15884:16112(228) ack 1 win 65535
12:23:18.276140 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 15736 win 14512
12:23:18.276149 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 16112:16340(228) ack 1 win 65535
12:23:18.276232 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 16340:16488(148) ack 1 win 65535
12:23:18.276306 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 16488:16716(228) ack 1 win 65535
12:23:18.276338 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 16112 win 14136
12:23:18.276393 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 16716:16864(148) ack 1 win 65535
12:23:18.276462 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 16488 win 13760
12:23:18.276470 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 16864:17012(148) ack 1 win 65535
12:23:18.276549 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 17012:17240(228) ack 1 win 65535
12:23:18.276620 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 16864 win 13384
12:23:18.276624 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 17240:17468(228) ack 1 win 65535
12:23:18.276716 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 17468:17616(148) ack 1 win 65535
12:23:18.276792 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 17616:17844(228) ack 1 win 65535
12:23:18.276817 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 17240 win 13008
12:23:18.276866 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 17844:17992(148) ack 1 win 65535
12:23:18.276957 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 17992:18220(228) ack 1 win 65535
12:23:18.276969 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 17616 win 12632
12:23:18.277045 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 18220:18368(148) ack 1 win 65535
12:23:18.277090 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 17992 win 12256
12:23:18.277127 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 18368:18516(148) ack 1 win 65535
12:23:18.277200 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 18516:18744(228) ack 1 win 65535
12:23:18.277227 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 18220 win 17520
12:23:18.277275 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 18744:18972(228) ack 1 win 65535
12:23:18.277383 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 18972:19296(324) ack 1 win 65535
12:23:18.277397 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 18516 win 17224
12:23:18.277529 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 18972 win 16768
12:23:18.277537 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 19296:19444(148) ack 1 win 65535
12:23:18.277614 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 19444:19576(132) ack 1 win 65535
12:23:18.277689 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 19576:19804(228) ack 1 win 65535
12:23:18.277764 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 19804:19952(148) ack 1 win 65535
12:23:18.277796 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 19444 win 16296
12:23:18.277845 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 19952:20100(148) ack 1 win 65535
12:23:18.277921 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 20100:20248(148) ack 1 win 65535
12:23:18.277976 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 19804 win 17520
12:23:18.278001 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 20248:20476(228) ack 1 win 65535
12:23:18.278086 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 20476:20624(148) ack 1 win 65535
12:23:18.278107 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 20100 win 17224
12:23:18.278159 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 20624:20852(228) ack 1 win 65535
12:23:18.278249 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 20852:21080(228) ack 1 win 65535
12:23:18.278268 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 20476 win 16848
12:23:18.278323 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 21080:21228(148) ack 1 win 65535
12:23:18.278413 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 20852 win 16472
12:23:18.278456 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 21228:21456(228) ack 1 win 65535
12:23:18.278531 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 21456:21604(148) ack 1 win 65535
12:23:18.278556 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 21228 win 16096
12:23:18.278605 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 21604:21832(228) ack 1 win 65535
12:23:18.278698 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 21832:22060(228) ack 1 win 65535
12:23:18.278768 IP 192.168.1.122.sdclient > gw.holda.lan.ssh: . ack 21604 win 15720
12:23:18.278773 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 22060:22208(148) ack 1 win 65535
12:23:18.278857 IP gw.holda.lan.ssh > 192.168.1.122.sdclient: P 22208:22356(148) ack 1 win 65535



[root@gw ~]# iptables -L
Chain INPUT (policy DROP)
target prot opt source destination
DROP all -- anywhere anywhere state INVALID
REJECT tcp -- anywhere anywhere tcp flags:SYN,ACK/SYN,ACK state NEW reject-with tcp-reset
DROP tcp -- anywhere anywhere tcp flags:!FIN,SYN,RST,ACK/SYN state NEW
DROP all -- 127.0.0.0/8 anywhere
DROP all -- 169.254.0.0/16 anywhere
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT icmp -- anywhere anywhere icmp echo-reply
ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
ACCEPT icmp -- anywhere anywhere icmp echo-request
ACCEPT icmp -- anywhere anywhere icmp time-exceeded
ACCEPT udp -- anywhere anywhere udp spt:bootps dpt:bootpc
ACCEPT tcp -- anywhere anywhere tcp spt:bootps dpt:bootpc
ACCEPT tcp -- anywhere 91.135.22.36 tcp dpt:ms-sql-s
ACCEPT tcp -- anywhere 91.135.22.36 tcp dpt:ssh
ACCEPT tcp -- anywhere 91.135.22.36 tcp dpt:hosts2-ns
ACCEPT tcp -- anywhere 91.135.22.36 tcp dpt:westell-stats
ACCEPT udp -- anywhere anywhere udp dpts:1024:65535 state RELATED,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp dpts:1024:65535 state RELATED,ESTABLISHED

Chain FORWARD (policy DROP)
target prot opt source destination
ACCEPT tcp -- anywhere 192.168.1.170 tcp dpt:5900
ACCEPT tcp -- anywhere 192.168.1.243 tcp dpt:ms-sql-s
ACCEPT tcp -- anywhere 192.168.1.240 tcp dpt:5900
ACCEPT tcp -- anywhere 192.168.1.241 tcp dpt:5900
ACCEPT tcp -- anywhere 192.168.1.242 tcp dpt:5900
ACCEPT tcp -- anywhere 192.168.1.243 tcp dpt:5900
ACCEPT tcp -- anywhere 192.168.1.64 tcp dpt:5900
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere

Chain OUTPUT (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT icmp -- anywhere anywhere
ACCEPT udp -- anywhere anywhere udp spt:bootpc dpt:bootps
ACCEPT tcp -- anywhere anywhere tcp spt:bootpc dpt:bootps
ACCEPT tcp -- 91.135.22.36 anywhere tcp spt:ms-sql-s
ACCEPT tcp -- 91.135.22.36 anywhere tcp spt:ssh
ACCEPT tcp -- 91.135.22.36 anywhere tcp spt:hosts2-ns
ACCEPT tcp -- 91.135.22.36 anywhere tcp spt:westell-stats
ACCEPT all -- anywhere anywhere

Chain drop-lan (0 references)
target prot opt source destination
DROP all -- anywhere anywhere
[root@gw ~]#


ну собственно воть

[Rezor666]

Сделайте tcpdump -i eth5 -vv и попробуйте сделать service iptables stop и посмотрите что будет

[CountSH]

[root@gw ~]# service iptables stop
iptables: нераспознанная служба

[root@gw ~]# tcpdump -i eth5 -vv
tcpdump: listening on eth5, link-type EN10MB (Ethernet), capture size 96 bytes
12:51:34.555157 IP (tos 0x0, ttl 128, id 40370, offset 0, flags [DF], proto: TCP (6), length: 783) 192.168.1.5.instl_bootc > 212.47.222.22.http: P 3125538993:3125539736(743) ack 2128970430 win 32768
12:51:34.555309 IP (tos 0x10, ttl 64, id 937, offset 0, flags [DF], proto: TCP (6), length: 172) gw.holda.lan.ssh > 192.168.1.122.sdclient: P 3222147959:3222148091(132) ack 3800102094 win 65535
12:51:34.555608 IP (tos 0x0, ttl 128, id 41400, offset 0, flags [DF], proto: TCP (6), length: 40) 192.168.1.122.sdclient > gw.holda.lan.ssh: ., cksum 0x3322 (correct), 1:1(0) ack 132 win 17268
12:51:34.556320 IP (tos 0x0, ttl 128, id 40371, offset 0, flags [DF], proto: TCP (6), length: 689) 192.168.1.5.remote-as > rev-81-94-239-52.deac.net.http: P 4010020752:4010021401(649) ack 2176481484 win 64411
12:51:34.556764 IP (tos 0x0, ttl 128, id 20634, offset 0, flags [DF], proto: TCP (6), length: 40) 192.168.1.62.4531 > games42.p.mail.ru.843: ., cksum 0x8ba1 (correct), 1168734339:1168734339(0) ack 426581051 win 64191
12:51:34.558656 IP (tos 0x0, ttl 56, id 38870, offset 0, flags [DF], proto: TCP (6), length: 1165) rev-81-94-239-52.deac.net.http > 192.168.1.5.remote-as: P 1:1126(1125) ack 649 win 65535
12:51:34.559787 IP (tos 0x10, ttl 64, id 938, offset 0, flags [DF], proto: TCP (6), length: 284) gw.holda.lan.ssh > 192.168.1.122.sdclient: P 132:376(244) ack 1 win 65535
12:51:34.561018 IP (tos 0x10, ttl 64, id 939, offset 0, flags [DF], proto: TCP (6), length: 284) gw.holda.lan.ssh > 192.168.1.122.sdclient: P 376:620(244) ack 1 win 65535
12:51:34.561161 IP (tos 0x10, ttl 64, id 940, offset 0, flags [DF], proto: TCP (6), length: 284) gw.holda.lan.ssh > 192.168.1.122.sdclient: P 620:864(244) ack 1 win 65535
12:51:34.561350 IP (tos 0x0, ttl 128, id 41401, offset 0, flags [DF], proto: TCP (6), length: 40) 192.168.1.122.sdclient > gw.holda.lan.ssh: ., cksum 0x3322 (correct), 1:1(0) ack 620 win 16780
12:51:34.562375 IP (tos 0x0, ttl 52, id 10612, offset 0, flags [DF], proto: TCP (6), length: 517) 62.84.6.45.http > 192.168.1.5.cognex-insight: P 3160276460:3160276937(477) ack 3966542867 win 69
12:51:34.562387 IP (tos 0x0, ttl 52, id 10613, offset 0, flags [DF], proto: TCP (6), length: 40) 62.84.6.45.http > 192.168.1.5.cognex-insight: F, cksum 0x583b (correct), 477:477(0) ack 1 win 69
12:51:34.562499 IP (tos 0x0, ttl 128, id 40372, offset 0, flags [none], proto: UDP (17), length: 64) 192.168.1.5.56832 > gw.holda.lan.domain: [udp sum ok] 1318+ A? aolv.hit.gemius.pl. (36)
12:51:34.562757 IP (tos 0x0, ttl 52, id 4586, offset 0, flags [none], proto: UDP (17), length: 84) 157.56.106.184.teredo > 192.168.1.170.53175: UDP, length 56
12:51:34.563039 IP (tos 0x0, ttl 128, id 40373, offset 0, flags [DF], proto: TCP (6), length: 40) 192.168.1.5.cognex-insight > 62.84.6.45.http: ., cksum 0xd96e (correct), 1:1(0) ack 478 win 32529
12:51:34.563397 IP (tos 0x0, ttl 128, id 40374, offset 0, flags [DF], proto: TCP (6), length: 40) 192.168.1.5.cognex-insight > 62.84.6.45.http: F, cksum 0xd96d (correct), 1:1(0) ack 478 win 32529
12:51:34.563412 arp who-has 192.168.1.106 tell 192.168.1.170
12:51:34.563443 IP (tos 0x0, ttl 128, id 13926, offset 0, flags [none], proto: UDP (17), length: 80) 192.168.1.170.53175 > 178.215.76.97.61865: [udp sum ok] UDP, length 52

18 packets captured
82 packets received by filter
0 packets dropped by kernel

[Rezor666]

CountSH, а какая версия Ubuntu?

[CountSH]

10.3 вроде, там вообще стоит типа готовое решение ClearOS 5.2 на базе Ubuntu. Досталось от предшественника, ну и как бы пока все работало я туда даже не лазил

[zai]

Попробуй перезагрузить, может зависло.

[CountSH]

[root@gw ~]# ifconfig eth5
eth5 Link encap:Ethernet HWaddr 00:03:47:D5:3F:E6
inet addr:192.168.1.254 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::203:47ff:fed5:3fe6/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:209504463 errors:0 dropped:0 overruns:3641 frame:3641
TX packets:220432055 errors:180 dropped:0 overruns:0 carrier:180
collisions:0 txqueuelen:1000
RX bytes:180268113 (171.9 MiB) TX bytes:2588285709 (2.4 GiB)

zai, ну это было сделано первым делом :( перезагружен сам шлюз и все свичи

[Rezor666]

CountSH, Она базируеться на CentOS или на RHEL (я не особо понял на чем именно).
На сервере есть что-то важное? Какие роли он выполняет?

[CountSH]

странно, загрузчик от Убунты....

[Rezor666]

странно, загрузчик от Убунты.... »
Не видел его:)
Но офф сайт говорит
Core system upgraded to CentOS 5.5

[CountSH]

обе 7-ки увидели шлюз, что произошло непонятно...

[Rezor666]

iptables -F сбрасывает все правила...

[CountSH]

я не успел сделать iptable -F :)

[Rezor666]

CountSH, В общем лучше поставьте CentOS и не парьтесь...

[CountSH]

zai, да, Rezor666, прав, CentOS....