Re: [SAGE] technical help with routing on Solaris 10

[Rodrick Brown <rodrick.brown@gmail.com>]

Try running a snoop -V port 80 and telnet yahoo,com 80 again

If your not getting a SYN_ACK its pretty clear that your firewall is
dropping this packet you should see a SYN_SENT if you do a netstat -a
if you dont kill the telnet session.  Your setup is pretty standard it
doesnt look like a routing problem on the host side I would check the
firewall logs/rules again.


On 11/27/05, Adam Levin <levins@westnet.com> wrote:
>
> On Sun, 27 Nov 2005, Rodrick Brown wrote:
> > I'm assuming you tried to ping 10.66.0.3 from your server and it was
> > reachable ?
>
> Yup, can ping it no problem.
>
> > Does your firewall logs even show your tcp request on port 80 to 66.94.234.13
> > Also validate your /etc/netmasks make sure everything is setup correctly.
>
> No.  I see the ICMP traffic, but not the telnet traffic (if I telnet to
> 10.66.0.3, I see the failed attempt to log in, but if I telnet to the 66
> address, I see nothing on the firewall).
>
> /etc/netmasks has:
> 10.64.0.0 255.255.0.0
> 10.65.0.0 255.255.0.0
> 10.66.0.0 255.255.0.0
> 10.67.0.0 255.255.0.0
>
> -Adam
>
>


--
Rodrick R. Brown
Senior IT Consultant
http://www.rodrickbrown.com