From: Bob Proulx <b...@proulx.co.> Date: Mon, 10 Jan 2011 21:55:10 -0700 > They don't reach the external interface? That is an excellent clue. > But I think it might be a problem trying to have traceroute do it. > ... try netcat instead.
At work now and this happens on Dalton. 142.103.107.138 is carnot.yi.org on the LAN here. ssh dalton to carnot and carnot to dalton work as expected. Appears that dalton is unable to send a test datagram out its external interface, port 1194. * From: Mike Bird <mgb-deb...@yosemite.net> * Date: Mon, 10 Jan 2011 21:26:28 -0800 > FWIW, we have not encountered any problems in what is now a mixed > Lenny/Squeeze OpenVPN network. OK. Seems that somehow I've managed to disable port 1194 or tcpdump. Thanks, ... Peter E. In ssh viewer 0 on dalton. r...@dalton:~# shorewall stop Stopping Shorewall.... Running /sbin/iptables-restore... done. r...@dalton:~# tcpdump -lni any port 1194 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on any, link-type LINUX_SLL (Linux cooked), capture size 65535 bytes In ssh viewer 1 on dalton. r...@dalton:~# echo foo | netcat -u 142.103.107.138 1149 In ssh viewer 0 on dalton. ^C 0 packets captured 0 packets received by filter 0 packets dropped by kernel r...@dalton:~# shorewall start Compiling... -- http://members.shaw.ca/peasthope/ http://carnot.yi.org/ = http://carnot.pathology.ubc.ca/ -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/ce54ae37a0f7a.4d2c6...@shaw.ca
