I would like to understand if the DHCP client running in our embedded device is expected to send DHCP request unicasted to the server in the following events?
As per a normal dhcp client running in the Windows 10 machine,It does send the unicast message in the event of unplug and disable/enable the interface.However the RFC 2131 doesn't explicitly states the behaviour? Or I missed some points in the RFC??
I have to validate whether my router's QOS policies are working correctly.I have come up with an approach to tag the packets with DSCP values using IPTABLES.
Can anyone confirm whether my approach is correct?If not please provide your help to correct the same.
IPtables rule
# Mark packets based on the originating port and other requirements mentioned in the table
iptables -t mangle -A OUTPUT -p IGMP -m udp --sport 5051 -j DSCP --set-dscp-class cs5 iptables -t mangle -A OUTPUT -p IGMP -m IGMP --sport 5052 -j DSCP --set-dscp-class cs5 iptables -t mangle -A OUTPUT -p udp -m udp --sport 5053 -j DSCP --set-dscp-class cs5 iptables -t mangle -A OUTPUT -p udp -m udp -d xxx.123.219.132/32 --dport 5054 -j DSCP --set-dscp-class cs2 iptables -t mangle -A OUTPUT -p udp -m udp -d xxx.123.219.132/32 --dport 5055 -j DSCP --set-dscp-class cs2 iptables -t mangle -A OUTPUT -p udp -m udp --sport 5056 --dport 123 -j DSCP --set-dscp-class cs2 iptables -t mangle -A OUTPUT -p udp -m udp --sport 5057 --dport 67:68 -j DSCP --set-dscp-class cs2 iptables -t mangle -A OUTPUT -p udp -m udp --sport 5058 --dport 53 -j DSCP --set-dscp-class cs2
I'm not able access samba from a windows 10 machine which is having a mail user account.However,when i login with a local user account i'm able to access the samba share.
I went ahead and captured the Wireshark traces and i was able to understand that i'm not getting response for setup andx Request when i use the mail account.
Can anyone help me on this case?I think i will have to do some policy changes in windows client side to enable the access.
I'm able to access the share without any problem when I use the local user account.Problem is only observed when i try to access it using a client with mail user account.
Samba Version is 2.2.12
I'm trying to configure bind for ipv6 protocol.I have added the entries to the zone and configuration files but still the ipv6 IPs are not returned when i try for nslookup.Can someone guide me to correct the configuration files?
/etc/bind/zones/db.10 file
;
; BIND reverse data file for local loopback interface
;
$TTL 604800
@ IN SOA necopdnsone.necthree.com. root.necthree.com. (
3 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
; NS records
IN NS necopdnsone.necthree.com.
IN NS necopdnstwo.necthree.com.
129 IN PTR gateway.necthree.com.
132 IN PTR necopdnsone.necthree.com.
133 IN PTR necopdnstwo.necthree.com.
131 IN PTR necopdhcp.necthree.com.
135 IN PTR necopsegw.necthree.com.
/etc/bind/zones/db6.ip6.10
;
; BIND reverse data file for local loopback interface
;
$TTL 604800
@ IN SOA necopdnsone.necthree.com. root.necthree.com. (
3 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
; NS records
IN NS necopdnsone.necthree.com.
IN NS necopdnstwo.necthree.com.
1.0.0.0 IN PTR gateway.necthree.com.
8.0.0.0 IN PTR necopdnsone.necthree.com.
9.0.0.0 IN PTR necopdnstwo.necthree.com.
7.0.0.0 IN PTR necopdhcp.necthree.com.
6.0.0.0 IN PTR necopsegw.necthree.com.
/etc/bind/zones/db.necthree.com
;
; BIND data file for local loopback interface
;
$TTL 604800
@ IN SOA necopdnstwo.necthree.com. root.necthree.com. (
4 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
; NS records
IN NS necopdnsone.necthree.com.
IN NS necopdnstwo.necthree.com.
; A records
necopdnsone.necthree.com. IN A 10.222.190.132
necopdnsone.necthree.com. IN AAAA 2001:1:1:3::8
necopdnstwo.necthree.com. IN A 10.222.190.133
necopdnstwo.necthree.com. IN AAAA 2001:1:1:3::9
necopdhcp.necthree.com. IN A 10.222.190.131
necopdhcp.necthree.com. IN AAAA 2001:1:1:3::7
necopsegw.necthree.com. IN A 10.222.190.135
necopsegw.necthree.com. IN AAAA 2001:1:1:3::6
;@ IN A 127.0.0.1
;@ IN AAAA ::1
gateway IN A 10.222.190.129
gateway IN AAAA 2001:1:1:3::1
;gaia IN A 10.222.190.60
www IN CNAME necthree.com.
named.conf.local
//
// Do any local configuration here
//
// Consider adding the 1918 zones here, if they are not used in your
// organization
//include "/etc/bind/zones.rfc1918";
zone "necthree.com" {
type master;
file "/etc/bind/zones/db.necthree.com";
};
zone "190.222.10.in-addr.arpa" {
type master;
file "/etc/bind/zones/db.10";
};
zone "0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.1.0.0.0.1.0.0.0.1.0.0.2.ip6.arpa" {
type master;
file "/etc/bind/zones/db.ip6.10";
};
nslookup output
root@ubuntu:/etc/bind# nslookup gateway.necthree.com
Server: 127.0.0.1
Address: 127.0.0.1#53
Name: gateway.necthree.com
Address: 10.222.190.129
I'm planning to configure DHCPv6 and DNS server in my network.
Can someone guide me to configure the dhcpv6 and DNS server for IPv6?
Info for #1 Query # This is a very basic subnet declaration.
subnet 10.222.190.0 netmask 255.255.255.192 {
range 10.222.190.54 10.222.190.61;
# option routers rtr-239-0-1.example.org, rtr-239-0-2.example.org;
}
subnet6 2001:1:1:1::0 netmask 64 {
range6 2001:1:1:1::15 2001:1:1:1::35;
# option routers rtr-239-0-1.example.org, rtr-239-0-2.example.org;
}
Info for #3 query.
eth1 Link encap:Ethernet HWaddr 08:00:27:f4:63:54
inet addr:10.222.190.55 Bcast:10.222.190.63 Mask:255.255.255.192
inet6 addr: 2001:1:1:1::9/64 Scope:Global
inet6 addr: fe80::a00:27ff:fef4:6354/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:77414 errors:0 dropped:0 overruns:0 frame:0
TX packets:234 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:5207783 (5.2 MB) TX bytes:32631 (32.6 KB)
eth2 Link encap:Ethernet HWaddr 08:00:27:38:fc:87
inet addr:10.222.190.70 Bcast:10.222.190.127 Mask:255.255.255.192
inet6 addr: fe80::a00:27ff:fe38:fc87/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:174 errors:0 dropped:0 overruns:0 frame:0
TX packets:10 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:45035 (45.0 KB) TX bytes:988 (988.0 B)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:268 errors:0 dropped:0 overruns:0 frame:0
TX packets:268 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:20504 (20.5 KB) TX bytes:20504 (20.5 KB)
Interface config file
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
# The loopback network interface
auto lo
iface lo inet loopback
# The primary network interface
#auto eth0
#iface eth0 inet dhcp
# Primary entry node Enterprise NAT
auto eth1
iface eth1 inet static
address 10.222.190.55
netmask 255.255.255.192
network 10.222.190.0
broadcast 10.222.190.63
gateway 10.222.190.1
iface eth1 inet6 static
address 2001:1:1:1::9
#address fd01:1:1:1::9
netmask 64
gateway 2001:1:1:1::1
# Exit Node Access NAT
auto eth2
iface eth2 inet static
address 10.222.190.70
netmask 255.255.255.192
network 10.222.190.64
broadcast 10.222.190.127
gateway 10.222.190.65
iface eth2 inet6 static
address 2001:1:1:2::6
#address fd01:1:1:2::6
netmask 64
gateway 2001:1:1:2::1
IPv6 Planning carried out:
Interface name Eth:IP Address Gateway IP Routing Prefix
ETH2 2001:1:1:1::6 2001:1:1:1::1 64
ETH1 2001:1:1:1::7 2001:1:1:1::1 64
ETH4 2001:1:1:1::8 2001:1:1:1::1 64
ETH1 2001:1:1:1::9 2001:1:1:1::1 64
ETH2 2001:1:1:2::6 2001:1:1:2::1 64
ETH4 2001:1:1:2::7 2001:1:1:2::1 64
ETH3 2001:1:1:2::8 2001:1:1:2::1 64
ETH4 2001:1:1:2::9 2001:1:1:2::1 64
ETH0 2001:1:1:2::10 2001:1:1:2::1 64
ETH0 2001:1:1:2::11 2001:1:1:2::1 64
ETH1 2001:1:1:3::6 2001:1:1:3::1 64
ETH5 2001:1:1:3::7 2001:1:1:3::1 64
ETH4 2001:1:1:3::8 2001:1:1:3::1 64
ETH5 2001:1:1:3::9 2001:1:1:3::1 64
I have setup a Ubuntu server(xxx.222.4.216) for our Redmine tool and recently we got a IP conflict in the machine and now im unable to get back the IP(xxx.222.4.216). I would like to know if there is any possibility to forcefully down the IP from the LAN and get back the same.I will do the MAC binding once i get the IP address back.
So far i did the arp-a to get the physical address and the vendor look up too.Ethernet card is Asustek.I also tried to mstsc to the host and negotiation went through as well.So im pretty much certain that the remote host is a Windows7 based PC only.
Please let me know if there is any possibility to get the IP address back forcefully?
I'm working on something in the transport layer and after i ran our custom policies for securing the policies i'm not able to do traceroute from the linux machine.
root@keystone-evm:~# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT udp -- anywhere 10.222.4.212 udp dpt:echo
ACCEPT udp -- anywhere 10.222.4.212 udp dpt:isakmp
ACCEPT udp -- anywhere 10.222.4.212 udp dpt:radius
ACCEPT udp -- anywhere 10.222.4.212 udp dpt:ntp
ACCEPT icmp -- anywhere 10.222.4.212
ACCEPT udp -- anywhere 10.222.4.212 udp dpt:domain
ACCEPT udp -- anywhere 10.222.4.212 udp dpt:bootpc
ACCEPT udp -- anywhere 10.222.4.212 udp dpt:bootps
ACCEPT 123 -- anywhere 10.222.4.212
DROP all -- anywhere anywhere
ACCEPT udp -- anywhere anywhere udp spts:33434:33524 state NEW,RELATED,ESTABLISHED
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
ACCEPT udp -- 10.222.4.212 anywhere udp dpt:echo
ACCEPT udp -- 10.222.4.212 anywhere udp dpt:isakmp
ACCEPT udp -- 10.222.4.212 anywhere udp dpt:radius
ACCEPT udp -- 10.222.4.212 anywhere udp dpt:ntp
ACCEPT icmp -- 10.222.4.212 anywhere
ACCEPT udp -- 10.222.4.212 anywhere udp dpt:domain
ACCEPT udp -- 10.222.4.212 anywhere udp dpt:bootpc
ACCEPT udp -- 10.222.4.212 anywhere udp dpt:bootps
ACCEPT 123 -- 10.222.4.212 anywhere
DROP all -- anywhere anywhere
ACCEPT udp -- anywhere anywhere udp dpts:33434:33524 state NEW
root@keystone-evm:~# traceroute 10.222.4.100
traceroute to 10.222.4.100 (10.222.4.100), 30 hops max, 38 byte packets
1traceroute: sendto: Operation not permitted
The given below is the command I issued to enable traceroute:
iptables -A OUTPUT -o eth0 -p udp --dport 33434:33524 -m state --state NEW -j ACCEPTiptables -A INPUT -p udp --sport 33434:33524 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
I want to test whether my linux machine is actually accepting ICMP re-direct message and updating the entry in routing table.This is what i have done so far to achieve the same.
still the routing table is not getting updated with the new gateway.
The below shown is the current routing table in my machine.
Destination Gateway Genmask Flags Metric Ref Use Iface
10.222.4.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
All I want to test is whether the host machine is updating the routing table after receiving ICMP redirect message.